Merge pull request 'flake.lock: Update' (#6) from flyinggecko/nix-flake-update/patch into main

Reviewed-on: #6

```

```

.forgejo/workflows/publish.yaml

@@ -0,0 +1,41 @@
+name: build and publish containers
+
+on:
+  push:
+    branches:
+      - main
+  schedule:
+    - cron: "0 0 * * 1,3,5"
+
+jobs:
+  build:
+    runs-on: nixos-latest
+    strategy:
+      matrix:
+        container: [ nixos ]
+        version: [ "24.11", "unstable" ]
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+        with:
+          ref: 'main'
+      - name: nix package names
+        id: pkgs
+        run: |
+          echo "pkgs-name=${{ matrix.container }}-${{ matrix.version }}" | tr -d . >>"${GITHUB_OUTPUT}"
+      - name: build
+        uses: actions/nix/build@main
+        with:
+          package: ${{ steps.pkgs.outputs.pkgs-name }}
+          out-link: ${{ steps.pkgs.outputs.pkgs-name }}
+      - name: load image into podman
+        run: |
+          podman load < ${{ steps.pkgs.outputs.pkgs-name }}
+      - name: publish image
+        uses: actions/push-to-registry@v2
+        with:
+          image: oci-images/nixos-runner/${{ matrix.container }}
+          tags: ${{ matrix.version }}
+          registry: git.flyinggecko.org
+          username: flyinggecko
+          password: ${{ secrets.REGISTRY_TOKEN }}

.forgejo/workflows/update.yaml

@@ -0,0 +1,17 @@
+name: scheduled flake.lock update
+on:
+  schedule:
+    - cron: "0 0 * * 0,2,4"
+  workflow_dispatch: {}
+
+jobs:
+  flake-lock-update:
+    runs-on: nixos-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: 'main'
+      - uses: actions/nix-flake-update-pr.git@main
+        with:
+          token: ${{ secrets.FORGEJO_PR_TOKEN }}
+          author-email: flake@flyinggecko.org