flake.lock: Update

Flake input changes:

* Updated 'nixpkgs': 'github:NixOS/nixpkgs/bb8a5e54845012ed1375ffd5f317d2fdf434b20e' -> 'github:NixOS/nixpkgs/f77036342e2b690c61c97202bf48f2ce13acc022'

man: fix formatting of nix3-profile-remove

Eventually delete the CA paths lock files

Make the CA tests actually test something

Fixes

  error: cannot create symlink '/home/eelco/Dev/nix/tests/result'; already exists

Mark the lockfiles as having to eventually be deleted so that they don’t
stay laying around in the store at the end of the build

Fix #4936

Make CA derivations compatible with recursive Nix

Add an access-control list to the realisations in recursive-nix (similar
to the already existing one for store paths), so that we can build
content-addressed derivations in the restricted store.

Fix #4353

Make the post-build-hook also run for unresolved CA derivations

Fix #4837

Broken by https://github.com/NixOS/nix/issues/4936

Fix a mistake in config.nix that was preventing
`NIX_TESTS_CA_BY_DEFAULT` from having any meaningful effect

Gracefully handle duplicate realisations

Make `nix develop` work with CA derivations

Should always hold, but that’s not necessarily obvious, so better
enforce it

Make `nix-shell` support content-addressed derivations

Recursively substitute the realisations

Fix zsh completion script

Make `computeFSClosure` ca-aware

Add a ca-derivations required machine feature

Fix the remote build of CA derivations

Track the dependencies of CA realisations

Co-authored-by: Eelco Dolstra <edolstra@gmail.com>

Rather than copying them around everywhere

Co-authored-by: Eelco Dolstra <edolstra@gmail.com>

This shouldn’t happen in practice, so better make it explicit

perlBindings: fix build on aarch64-darwin

Always send the realisations as JSON

Remove a possible existing store path when building CA derivations