Discovered during implementation: the build-from-source derivations
need to fetch from forge mirrors for supply chain control, but
client-go and django-rest-framework repos aren't mirrored yet.
Also corrects target version to 2026.2.0 (latest stable) — the
whole point of building from source is to escape nixpkgs lag.
Changes:
- New card: mirror-authentik-build-deps
- authentik-api-client-generation now requires mirror-authentik-build-deps
- authentik-python-backend-derivation now requires mirror-authentik-build-deps
- Goal card updated with 2026.2.0 target version
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>