git: push --force-if-includes as default

stronger protection against accidentally overwriting remote commits by
another user, especially in the face of auto-fetching git clients.

home/common.nix

@@ -44,6 +44,7 @@
     extraConfig = {
       credential.helper = "cache";
       push.default = "simple";
+      push.forceIfIncludes = true;  # avoid accidental force overrides when remote is autofetched in background
       init.defaultBranch = "mainline";
       diff.tool = "vimdiff";
       merge.tool = "vimdiff";
@@ -75,6 +76,16 @@
       };
     };
   };
+  programs.lazygit = {
+    enable = true;
+    settings = {
+      git = {
+        autoFetch = false;
+        mainBranches = ["main" "master" "mainline"];
+      };
+      update.method = "never";
+    };
+  };
 
   # shell config
   programs.zsh = {

home/modules/packages.nix

@@ -106,7 +106,6 @@ let
       ripgrep
       fd
       gitui
-      lazygit
       pre-commit
       scriv