orion: pin sift e36da19 (restricted workspace)

Permit straylight-gs to query guardian-star; fleet callers still refused.

flake.lock

@@ -446,16 +446,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1790158709,
-        "narHash": "sha256-fnjjyh6jj2yv3ADimeRQAUjLXbj/p6U5FxLyyBV2beE=",
+        "lastModified": 1790177638,
+        "narHash": "sha256-sSpJwTkl4itssYQGvx/6zu4mgNX3+qatZbkspv+k05s=",
         "ref": "refs/heads/master",
-        "rev": "767c12c1af8fe518c6436bd8827f5ff81d37fa5f",
-        "revCount": 25,
+        "rev": "e36da19f57b2e5d0374d1c1fa8aecf6156fa58fe",
+        "revCount": 27,
         "type": "git",
         "url": "ssh://git@git.wntrmute.dev/kyle/sift"
       },
       "original": {
-        "rev": "767c12c1af8fe518c6436bd8827f5ff81d37fa5f",
+        "rev": "e36da19f57b2e5d0374d1c1fa8aecf6156fa58fe",
         "type": "git",
         "url": "ssh://git@git.wntrmute.dev/kyle/sift"
       }

flake.nix

@@ -23,7 +23,7 @@
     tracker.url = "git+https://git.wntrmute.dev/kyle/tracker";
     tracker.inputs.nixpkgs.follows = "nixpkgs";
 
-    sift.url = "git+ssh://git@git.wntrmute.dev/kyle/sift?rev=767c12c1af8fe518c6436bd8827f5ff81d37fa5f";
+    sift.url = "git+ssh://git@git.wntrmute.dev/kyle/sift?rev=e36da19f57b2e5d0374d1c1fa8aecf6156fa58fe";
     sift.inputs.nixpkgs.follows = "nixpkgs";
 
     tether.url = "git+ssh://git@git.wntrmute.dev/kyle/tether?rev=c89894b8dcac89aaea9ad72529524c1204884bc0";

hw/orion/default.nix

@@ -97,7 +97,8 @@
         };
         context = {
           honcho = "http://rift.scylla-hammerhead.ts.net:8000";
-          workspaces = [ "hermes-fleet" ];
+          workspaces = [ "hermes-fleet" "guardian-star" ];
+          permit_restricted = [ "straylight-gs" ];
         };
       };
     };