- add fetch-ec2-metadata service for AMI bootstrap - set git safe.directory for nixos-rebuild - note clawdinator-2 recovery in ops