chore: automate Nix hash update when lock file changes

Add `update-nix-hash` task and chain it to `update-lock` so that Nix
flake hashes stay synchronized with Deno lock file changes. This prevents
divergence between Deno and Nix dependency versions.

Author: natsukium

.github/workflows/test.yml

@@ -18,6 +18,7 @@ jobs:
       - uses: denoland/setup-deno@v2
         with:
           deno-version: ${{ env.DENO_VERSION }}
+      - uses: nixbuild/nix-quick-install-action@v34
       - run: deno fmt --check
       - run: deno lint
       - run: deno task check

deno.json

@@ -27,7 +27,8 @@
     "coverage": "deno coverage .coverage --include='src/'",
     "verify": "deno fmt && deno lint && deno task check && deno task test",
     "probitas": "deno run -A --unstable-kv --lock ./deno.lock ./mod.ts",
-    "update-lock": "rm deno.lock && deno cache -r mod.ts jsr:@probitas/probitas jsr:@probitas/probitas@^0",
+    "update-nix-hash": "nix run .#probitas.updateDepsHash",
+    "update-lock": "rm deno.lock && deno cache -r mod.ts jsr:@probitas/probitas jsr:@probitas/probitas@^0 && deno task update-nix-hash",
     "update-version": "deno run -A .scripts/update_version.ts"
   },
   "imports": {