Nix exec

Use `nix-exec`'s `fetchgit` for fetching dependent repos. In the future, `nix-exec` will also be used for secrets handling, uid calculation, etc.
it doesn't blow up as long as you reference single attributes inside of it (thanks to lazy evaluation)