[home] Create explicit kubectl role

This allows work machines to enable development, while not including
non-work-related kubectl management stuffs.

home/home-desktop.nix

@@ -16,6 +16,7 @@
     communication.enable = true;
     sync.enable = true;
     kdeconnect.enable = true;
+    kubectl.enable = true;
   };
 
   targets.genericLinux.enable = true;

home/home-laptop-compact.nix

@@ -17,6 +17,7 @@
     kdeconnect.enable = true;
     media.enable = true;
     sync.enable = true;
+    kubectl.enable = true;
     # office.enable = false;  # Excluded for storage constraints
   };
 

home/roles/default.nix

@@ -6,6 +6,7 @@
     ./development
     ./gaming
     ./kdeconnect
+    ./kubectl
     ./media
     ./office
     ./sync

home/roles/development/default.nix

@@ -30,8 +30,6 @@ in
       pkgs.custom.tea-rbw
     ];
 
-    programs.kubectl-secure.enable = true;
-
     # Install Claude Code humanlayer command and agent plugins
     home.activation.claudeCodeCommands = lib.hm.dag.entryAfter ["writeBoundary"] ''
       # Clean up old plugin-installed commands and agents to avoid duplicates

home/roles/kubectl/default.nix

@@ -0,0 +1,16 @@
+{ config, lib, pkgs, globalInputs, system, ... }:
+
+with lib;
+
+let
+  cfg = config.home.roles.kubectl;
+in
+{
+  options.home.roles.kubectl = {
+    enable = mkEnableOption "Enable management tools for the homelab k3s oglenet cluster";
+  };
+
+  config = mkIf cfg.enable {
+    programs.kubectl-secure.enable = true;
+  };
+}