nixos module: fix missing ssl certificates
package updater: build patches using nix-store --realise instead of nix-build.

Derivations for all patches are created by the patch generator. This allows
concurrent building of multiple patches since the builder no longer needs a
patched nixpkgs copy to start a build.
package updater: convert the log to ascii only once