sysdig: cheat nix into not capturing linux-dev as a runtime dependency

This shaves off ~40-60 megabytes of your next `nix-copy-closure`.