b3442637

Your first flake

Adds a `flake.nix` so the repo builds under Nix and can run on NixCI.

## What it does
- Builds with **crane** + the **oxalica rust-overlay** (x86_64-linux).
- Outputs: native CLI, static `x86_64-unknown-linux-musl` and cross
  `aarch64-unknown-linux-musl` release binaries, the wasm inspect UI, the npm
  package, plus `clippy`, `rustfmt` and the test suite — all wired into
  `nix flake check`.
- **One shared dependency derivation.** crane reduces its source to cargo
  metadata only (every `.rs` replaced by a stub), so editing source code never
  rebuilds dependencies. Proof you can run yourself:
  `./nix/experiments/deps-cache-stability.sh`.
- `wasm-bindgen-cli` pinned to `0.2.125` to match the `wasm-bindgen` crate
  (nixpkgs only ships `0.2.121`).

Also reformats the `antithesis_sdk` workspace dependency to a single-line inline
table: Nix's strict TOML 1.0 parser rejects the multi-line form (cargo tolerates
it). Semantically identical.

## CI
Running on NixCI staging here:
https://staging.nix-ci.com/gh:NorfairKing:bombadil/your-first-flake/da7842956e34a25884837f06a403d25f27710017

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 2m07s 2s 2s 2m09s 2m07s
Eval 2m09s 2m38s 2m38s 4m48s 0s
Build 7m04s 47s 24s 7m28s 2m15s
Suite 2m07s 3m28s 5m21s 7m28s 4m22s

Timeline

0s2m20s2m40s3m3m20s3m40s4m4m20s4m40s7m20s