add a flake.nix that outputs a devShell and adapt .envrc to it

note: you will need to enable nix flakes as described here

• feat(flake): add flake that provides a devShell
• feat(envrc): use flake --impure instead of nix