nixos: reserve some uids/gids

I have some NixOS modules for unfree software that I keep out of tree, and having UIDs/GIDs reserved is quite helpful to keep the branches sane.