pub fn find_nix() -> String
Resolve the path to the nix binary. Checks well-known locations first, then falls back to PATH-based lookup. Preferring hardcoded paths prevents PATH-based binary injection.
nix