a28f0108

Your first flake

Adds a `flake.nix` so the repo builds under Nix and can run on NixCI.

## What it does
- Builds with **crane** + the **oxalica rust-overlay** (x86_64-linux).
- Outputs: native CLI, static `x86_64-unknown-linux-musl` and cross
  `aarch64-unknown-linux-musl` release binaries, the wasm inspect UI, the npm
  package, plus `clippy`, `rustfmt` and the test suite — all wired into
  `nix flake check`.
- **One shared dependency derivation.** crane reduces its source to cargo
  metadata only (every `.rs` replaced by a stub), so editing source code never
  rebuilds dependencies. Proof you can run yourself:
  `./nix/experiments/deps-cache-stability.sh`.
- `wasm-bindgen-cli` pinned to `0.2.125` to match the `wasm-bindgen` crate
  (nixpkgs only ships `0.2.121`).

Also reformats the `antithesis_sdk` workspace dependency to a single-line inline
table: Nix's strict TOML 1.0 parser rejects the multi-line form (cargo tolerates
it). Semantically identical.

## CI
Running on NixCI staging here:
https://staging.nix-ci.com/gh:NorfairKing:bombadil/your-first-flake/da7842956e34a25884837f06a403d25f27710017

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 2m04s 2s 2s 2m06s 2m04s
Eval 2m06s 57s 57s 3m04s 0s
Build 5m52s 3s - - 2m49s
Suite 2m04s 1m03s - - 36h30m50s

Timeline

0s2m10s2m20s2m30s2m40s2m50s3m