sysdig: cheat nix into not capturing linux-dev as a runtime dependency