cache-pin 0.3.1

Pin Nix flake inputs to revisions with full binary-cache coverage