feat: Add fingerprint scanner support and modularize work configurations

- Add fingerprint.nix hardware module with TOD driver support
- Create separate laptop-work configuration with Cisco, Himmelblau, and MDATP work modules
- Move work-specific modules from shared to laptop-work profile
- Change work module enable defaults to false for better security-by-default
- Add MDATP support with enhanced modular structure

system/default.nix

@@ -21,9 +21,10 @@ let
     ./services/pipewire.nix # audio
   ];
 
-  # Laptop-specific modules (battery, bluetooth)
+  # Laptop-specific modules (battery, bluetooth, fingerprint)
   laptop = [
     ./hardware/bluetooth.nix
+    ./hardware/fingerprint.nix
     ./services/power.nix
   ];
 in {