substituteAllFiles: add derivation
stdenv: Fix handling filenames with spaces in "substitute"