Follow ups for !2

• hermetic /usr (!2 (comment 570015))
• A/B updates (see !2 (comment 659763))
• encrypted home
• Initial setup via phrog (see !12)
• Install more packages (see #2)

/cc @arun-mani-j @manut I hope didn't forget anything