flakes are not stable yet, community is divided but maintaining both flake and a set of dependencies in our scripts is hard. So provide a nix-shell that fetches the nixpkgs recorded in the flake.lock to keep a single source of truth
