coder: desktop template (KasmVNC + dotfiles) for the homelab cluster

Kubernetes template for coder.nic-oconnor.com: an XFCE desktop served by
the KasmVNC module, with this repo applied by the dotfiles module. Home is
a truenas-iscsi PVC so $HOME tools and op.env survive stops.

Pinned to enterprise-desktop:ubuntu-noble + KasmVNC 1.5.0 because the
plain `ubuntu` tag is now resolute, which KasmVNC has no package for.
Path-based app (no wildcard access URL). An ephemeral 1Password token
parameter lets bootstrap's secrets module run unattended on first start.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

README.md

@@ -95,6 +95,13 @@ Already have a clone? Just run it directly:
   are read from the **local checkout**, not re-downloaded from Gitea, so this
   repo does not have to be public for a shell to work; see its own README.
 
+Not run by `bootstrap.sh`:
+
+- `coder/desktop/` — Coder template for coder.nic-oconnor.com: an XFCE
+  desktop (KasmVNC) pod on the homelab cluster that applies this repo via the
+  dotfiles module. Push with `coder templates push desktop -d coder/desktop`;
+  see its README.
+
 ## Per-machine customizations and secrets
 
 `~/.zshrc` is managed — bootstrap overwrites it, so never hand-edit it.