Update nixpkgs

Pull upstream NixOS changes, security fixes and package updates:

- awscli2: 2.15.38 -> 2.15.43
- bundler: 2.5.7 -> 2.5.9
- calibre: 7.9.0 -> 7.10.0, (#308800)
- ceph: fix build of overridden pyopenssl
- ceph: switch python from 3.10 to 3.11
- chromedriver: 123.0.6312.122 -> 124.0.6367.91
- chromium: 124.0.6367.60 -> 124.0.6367.118
- chromium: fix cross-compilation
- chromium: lower version range of `--ozone-platform-hint` patch
- chromium: remove `--ozone-platform-hint` patch
- cmake: 3.29.1 -> 3.29.2
- docker-compose: 2.26.1 -> 2.27.0
- ffmpeg: add avisynth support
- ffmpeg: codec2 support
- ffmpeg: jxl support
- github-runner: 2.315.0 -> 2.316.1
- gitlab-container-registry: delete test in postPatch rather than with patch file
- gitlab-runner: 16.10.0 -> 16.11.0
- glibc: 2.39-5 -> 2.39-31
- glibc: allow (cross)-build on case-insensitive fs
- glibc: expose enableCET as overridable argument, default "permissive"
- haproxy: 2.9.6 -> 2.9.7, (#307729)
- imagemagick: 7.1.1-29 -> 7.1.1-30
- jetty: 12.0.7 -> 12.0.8
- jicofo: 1.0-1075 -> 1.0-1078
- libmodsecurity: update repo owner to owasp-modsecurity
- libwebp: 1.3.2 -> 1.4.0
- libwebp: drop freeimage from passthru.tests
- linux_5_15: 5.15.156 -> 5.15.158
- nodejs: make buildNpmPackage git dep lockfile fixup fail gracefully when no lockfile exists and git deps forced
- openssh: fix linkOpenSSL=false by linking libxcrypt
- openssl: update comments and add 1.1 deprecation notice
- postgresql: change pname for postgresql_jit attributes to postgresql-jit
- postgresql: clean up patches
- postgresql: enable parallel building on darwin
- postgresql: move explicit libxml2 include behind version flag
- postgresql: remove left-over LC_ALL environment variable
- postgresql: remove preConfigure CC variable
- postgresql: remove thisAttr argument by calling tests directly
- postgresql: rename patches
- pyslurm: remove obsolete patch
- python3Packages.pystemd: Move runtime dependencies to propagatedBuildInputs
- qemu: 8.2.2 -> 8.2.3
- rsync: 3.2.7 -> 3.3.0
- ruby_3_2: 3.2.3 -> 3.2.4
- slurm: 23.11.5.1 -> 23.11.6.1