Nix-ify more parts of the workflow

[CompeyDev]

• Use crane instead of running cargo commands inside nix devshell in CI, might allow us to eliminate separate caches for rust build outputs and nix
• Tasks like "check" in nix flake, instead of chaining multiple devshell commands
• Build docker images using nix, see nix2container dockerTools