feat: Add fingerprint scanner support and modularize work configurations

- Add fingerprint.nix hardware module with TOD driver support
- Create separate laptop-work configuration with Cisco, Himmelblau, and MDATP work modules
- Move work-specific modules from shared to laptop-work profile
- Change work module enable defaults to false for better security-by-default
- Add MDATP support with enhanced modular structure

work/himmelblau.nix

@@ -18,9 +18,13 @@
 let
   cfg = config.work.himmelblau;
 in {
+  imports = [
+    inputs.himmelblau.nixosModules.himmelblau
+  ];
+
   options.work.himmelblau = {
     enable = lib.mkEnableOption "Himmelblau Entra ID authentication" // {
-      default = true;
+      default = false;
     };
   };