Many significant improvements worth doing, overall great progress and most stuff works nicely. At the moement this is a lot of new modules that are separated, share a common "style" but lack the magic binding them all together. Some are pretty high level like the HA OPNSense KVM demo tying most of the new stuff together but then the openbao / zitadel modules are not integrated with the rest yet.
This should not panic, just return a clear error. This will require some refactoring of this module.
This should be a score that leverages the phased topology approach : LinuxHostTopology -> KvmHostTopology
This feels a bit fragile, but I'm not very familiar with openbao. Is there an api we can call using the root token to provision the first user? Is there a rust crate for vault/openbao that would allow doing this type-safely?