ci: update all nix flake targets

Hopefully this time the deployment will work, and if it doesn't then it'll be easier to debug the "latest" version of everything.