nixos: evaluate assertions at toplevel, not at systemPackages

Fixes #2340 

cc @edolstra