move PATH to .zshenv so non-interactive shells see it

.zshrc only runs for interactive shells — cron, ssh host-command, and
GUI-launched processes never sourced PATH before. Also includes pending
tmux theme/terminal-overrides work and rsync2/wm aliases.

.zshrc

@@ -110,17 +110,7 @@ zinit light starship/starship
   git --git-dir=$HOME/.dotgit/ --work-tree=$HOME pull --ff-only -q 2>/dev/null
 } &!
 
-# paths
-typeset -U path
-path=(
-  /projects/bin
-  $HOME/.local/bin
-  $HOME/.cargo/bin
-  /usr/local/go/bin
-  $HOME/go/bin
-  /opt/homebrew/bin
-  $path
-)
+# paths live in ~/.zshenv so non-interactive shells (cron, ssh cmd, GUI) see them
 
 # fzf (if available)
 if (( $+commands[fzf] )); then
@@ -198,9 +188,13 @@ alias dcu='docker compose up --force-recreate --detach'
 alias dcd='docker compose down --remove-orphans'
 alias dcl='docker compose logs -f'
 
+# aliases: rsync with sane defaults
+alias rsync2='rsync --info=PROGRESS2 --progress --recursive --compress --human-readable --update --times --no-whole-file --itemize-changes --stats --verbose --links --no-perms --chmod=ugo=rwX'
+
 # aliases: misc
 alias c="claude"
 alias ,cd="IS_SANDBOX=1 claude --dangerously-skip-permissions"
+alias wm="workmux"
 alias zshreload="exec zsh"
 alias -g LATEST='*(om[1])'            # glob: most recently modified
 alias FUNCTION_PRELUDE="setopt LOCAL_OPTIONS PIPE_FAIL XTRACE ERR_RETURN"