Add nixpkgs submodule (ugh, huge) and update the Makefile so that it actually builds via nix.  However, it cannot suppress rebuilds if made multiple times