Fix typos

Make nix/unpack-channel.nix a builtin builder

This is a hack to fix the build on macOS, which was failing because
libnixrust.a contains compiler builtins that clash with
libclang_rt.osx.a. There's probably a better solution...

https://hydra.nixos.org/build/107473280

Closes #3225.
Closes #3226.

Fixes #3246.

https://hydra.nixos.org/build/107467517

Seems that on i686-linux, gcc and rustc disagree on how to return
1-word structs: gcc has the caller pass a pointer to the result, while
rustc has the callee return the result in a register. Work around this
by using a bare pointer.

https://hydra.nixos.org/build/107466992

Also, fetchGit now runs in O(1) memory since we pipe the output of
'git archive' directly into unpackTarball() (rather than first reading
it all into memory).

In particular, these are emitted by 'git archive' (in fetchGit).

We can now convert Rust Errors to C++ exceptions. At the Rust->C++ FFI
boundary, Result<T, Error> will cause Error to be converted to and
thrown as a C++ exception.

This is no longer needed.

This was the last function using a shell script, so this allows us to
get rid of tar, coreutils, bash etc.

https://hydra.nixos.org/build/107457009

Downloader: Log configured CA file

Fix sandbox fallback settings

Ensure enough space in attrset bindings

Fixes #3239.