Use allowReferencesRec to check dependencies of stdenvLinux

This is a safeguard, so trivially looking changes around basic packages
or stdenv can't by accident cause stdenvLinux to depend on bootstrapTools.

Unfortunately this commit triggers a mass rebuild, since although there
are no semantic changes strictly speaking, the derivation and output
hashes are of course changed by the allowedReferences attribute.