Single workflow now: update lockfile + hash, build, then commit the fix on main only if the build passed. Eliminates the structural first-failure where Nix Build always raced the autofixer and lost.
Single workflow now: update lockfile + hash, build, then commit the fix on main only if the build passed. Eliminates the structural first-failure where Nix Build always raced the autofixer and lost.