Kieran's opinionated (and probably slightly dumb) nix config

ci: build on native runners, drop --remote-build; cache the activate binary master


+31 -6
2 changed files