hrm... I'm thinking prob the programs modules could be a solution

so instead of environment.systemPackages it would be more of programs.<name>.enable and that would add it internally
would also make throwing things out easier because it would be enough to just override the bool with a higer prio
such interfaces could then exist for apps _only_ so that it's easier to differentiate between fully-fledged apps and libraries that are "just there"