jetson-orin: enable givc and bump ghaf-givc

Enable givc on Orin (was disabled) and bump ghaf-givc to include
auto-create and resize of LVM slots for OTA updates (PR #372).

Signed-off-by: Jörg Thalheim <joerg@thalheim.io>

Author: Mic92

flake.lock

@@ -209,12 +209,10 @@ in
         nvidia-docker.daemon.enable = true;
       };
 
-      # Disable givc on Orin - GIVC requires TLS certificate infrastructure
-      # that isn't set up for Orin devices. This must be set in both:
-      # 1. ghaf.givc.enable (host-level option)
-      # 2. ghaf.global-config.givc.enable (propagates to VMs via specialArgs)
-      givc.enable = false;
-      global-config.givc.enable = false;
+      # givc is disabled by default on Orin — enable per-target in
+      # flake-module.nix for configurations that have been tested with it.
+      givc.enable = lib.mkDefault false;
+      global-config.givc.enable = lib.mkDefault false;
 
       host.networking = {
         enable = true;

modules/profiles/orin.nix

@@ -179,6 +179,8 @@ let
           extraModules = orinVerityModules;
           extraConfig = {
             reference.profiles.mvp-orinuser-trial.enable = true;
+            givc.enable = true;
+            global-config.givc.enable = true;
             partitioning.verity-volume.enable = true;
           };
         }