nixos: evaluate assertions at toplevel, not at systemPackages

Fixes #2340