feat(pyria-binary): implement `pyria nix`

[aenriii]

these are not quintessential to local deployment as i'm gradually becoming more open to nix (language) but for both TPM2-enabled systems and wider adoption it's essential.