nix: introduce eval-nixos (start decoupling images and infra)