chore: Upgrade nix dependencies

[cdecker]

• flake: Address two small warnings about outdated versions

Changelog-None

[cdecker]

Paging our resident nix expert @nepet to help out address the nix flake check failure. It is complaining about a vulnerable ring version being used:

Crate:     ring
Version:   0.17.8
Title:     Some AES functions may panic when overflow checking is enabled.
Date:      2025-03-06
ID:        RUSTSEC-2025-0009
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0009
Solution:  Upgrade to >=0.17.12
Dependency tree:
ring 0.17.8
├── x509-parser 0.16.0
│   └── rcgen 0.13.2
│       ├── clnrest 0.2.0
│       └── cln-grpc-plugin 0.4.0
├── sct 0.7.1
│   └── rustls 0.21.12
│       ├── tokio-rustls 0.24.1
│       │   └── axum-server 0.6.0
│       │       └── clnrest 0.2.0
│       └── axum-server 0.6.0
├── rustls-webpki 0.102.8
│   └── rustls 0.22.4
│       └── tokio-rustls 0.25.0
│           └── tonic 0.11.0
│               ├── cln-grpc-plugin 0.4.0
│               └── cln-grpc 0.4.1
│                   ├── cln-plugin 0.4.0
│                   │   ├── clnrest 0.2.0
│                   │   ├── cln-lsps 0.1.0
│                   │   └── cln-grpc-plugin 0.4.0
│                   └── cln-grpc-plugin 0.4.0
├── rustls-webpki 0.101.7
│   └── rustls 0.21.12
├── rustls 0.22.4
├── rustls 0.21.12
└── rcgen 0.13.2

Do you know how to pin an older, non-vulnerable, version?

[nepet]

Fixed the issue with the vulnerability in ring v0.17.8, nix flake check "?submodules=1" does not complain anymore.

We could reintroduce the ci workflow now.