Separate `tools` flake

Wouldn't recommend this pattern normally, but I'm trying to keep deps low for flake-parts until we have split dev inputs that don't carry over to dependent lock files.