nix flake update

[hydroakri]

Automated by update-flake-lock — the new lock already passed nix flake check in this workflow.
Merged only when CI is green; rolled back automatically on any failure.

Changed inputs

• disko ff8702b4de27 -> 725ea35e410a
• flake-parts_3 17c9d6cdfc60 -> 31729ca8cbdb
• geodb 56ac1779a958 -> 7dc228ac5141
• hercules-ci-effects 86c7c78a840b -> 6c58de7236d1
• hermes-agent fa7569221100 -> c07501ec411b
• nix-alien df422df43246 -> 0cca578c63e9
• nix-index-database 1111b9bc836a -> a74e17340755
• nix-index-database_2 116ad1c2adb6 -> 9ad722673ab3
• nix-minecraft 590a44d7c7f8 -> 2e6a1d1ceb4d
• nixos-hardware 83bbc8951205 -> 9ebcb7766700
• nixpak 333bd8c7ca0c -> 853aa37cf5b5
• nixpkgs_2 6d663c0533ff -> 1e8bc658fc98
• sops-nix 13616fff713a -> 7214124c20c1
• trivalent-nix ed9fe6ec583b -> 939edb22881f
• unstable 44a91898084f -> 6774f7bc2537

All four hosts are built by the ci.yml matrix once this PR is open.