[ci] vendor Nix packaging
Localize the nix pkgs definitions to allow for more fine-grained dependency management.
Also updates some of our dependencies, breaking + updating a bunch of things in the process.
- hwloc is kept at a version old enough to make it easy
- doxygen is kept in line with previous CI step until we check the rtd infra