Replace the fragile Python one-liner with nix-hash --sri for
computing flake hashes in CI. Add cachix/install-nix-action@v31
to ensure Nix is available on the runner. Add grep verification
to fail loudly if sed replacements don't take effect.
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>