programs.git.config.user.{name,email} in harness-base.nix now mkDefault so the per-agent applied flake's override merges without mkForce.