packaging: CI tests should use the nix-bound deps

[ships]

This could be as easy as nix develop -c [test command]. The key here is to prevent false greens due to using unbound dependency versions.