feat(installer): set a 90-minute suspend-to-hibernate ceiling

systemctl suspend-then-hibernate reads HibernateDelaySec, and unset it depends on the hardware: a machine with a battery hibernates on a low-battery alarm at an hour nobody chose, and one without falls back to systemd's 2h default. 90 minutes states a ceiling both machines share. A laptop can still hibernate earlier, because systemd runs both timers and takes whichever fires first.

The number is a tradeoff and the drop-in carries it: long enough that stepping out of a meeting costs a screen unlock rather than a passphrase and a full resume, short enough that a laptop left in a bag drops its encryption keys out of RAM. A suspended machine is still holding them.

Numbered 60- because systemd reserves 10-40 for vendor drop-ins under /usr and 60-90 for local ones under /etc. A 10- file here would sort below a vendor drop-in and quietly lose to it.

1 files changed, 1 insertions, 1 deletions

diff --git a/tests/installer-steps/test_orchestrators.py b/tests/installer-steps/test_orchestrators.py
index 34c46d1..c2eb710 100644
--- a/tests/installer-steps/test_orchestrators.py
+++ b/tests/installer-steps/test_orchestrators.py
@@ -28,7 +28,7 @@ ARCHSETUP = os.path.join(REPO_ROOT, "archsetup")
 ORCHESTRATORS = {
     "essential_services": [
         "configure_randomness", "configure_networking", "configure_power",
-        "configure_backlight_access",
+        "configure_hibernate_delay", "configure_backlight_access",
         "configure_ssh_server", "configure_fail2ban", "configure_firewall",
         "configure_service_discovery", "configure_job_scheduling",
         "configure_package_cache", "configure_snapshots",