release.nix: add missing SHA build input