deploy: colmena apply build: colmena build update: nix flake update --commit-lock-file