pinwheel: Add naviterm config secret, fix syncthing dir ownership

hosts/pinwheel/modules/syncthing/default.nix

@@ -69,6 +69,13 @@
     };
   };
 
+  # Ensure dataDir is owned by the syncthing user; otherwise the module creates it
+  # as root when making configDir (dataDir/.config/syncthing) on a fresh machine.
+  systemd.tmpfiles.rules = [
+    "d /home/alex/sync 0755 alex users -"
+    "d /home/alex/sync/.config 0755 alex users -"
+  ];
+
   age = {
     secrets = {
       "syncthing-cert".file = ../../../../secrets/pinwheel/syncthing-cert.age;