A clean-snapshot run showed qemu/virt-manager installed without choosing it: PR #4 had embedded the install in the niri module. Removed from there (zero virt packages in a plain niri run, harness-verified) and moved into install_category_pkgs Virtualisation: picking qemu/virt-manager there now also enables libvirtd and adds the user to the libvirt group.