watch_file default.nix use flake ..#firmware --impure