ci/shell.nix