default.nix: provide buildExecutableOnly