todo: publish to flake-hub whenever the test works and gates merges

[colemickens]

I'd like to publish this flake to flakehub: https://github.com/DeterminateSystems/flakehub-push

But we probably shouldn't do this until we actually are gating merges on the nixos test.