The Nixery environment could not compile Rust build scripts because the C linker was missing. Adding gcc and pkg-config provides the toolchain needed for signal-hook, serde_json, and other crates with build scripts. Defense: CI must mirror local definition-of-done; a broken CI is a broken gate, and the constitution only holds if the enforcement layer actually runs.