nix-exec: use nix stable

(cherry picked from commit e82aed56f945f7412d011d05b0573f1d19c0e9d9)