Robust and idempotent build pipelines using nix

Build pipelines can be challenging to get right, they can be brittle and hard to debug, often suffering from ‘work on my machine’ syndrome. We can eliminate most of this headache by adding nix to the mix