Revert "bump nixpkgs"

The last nixpkgs update introduced a regression in Prometheus 2.49.0 that
broke monitoring of zkapissuer in staging.  A hotfix to Prometheus (2.49.1)
was released an hour after the broken version, but NixOS 23.11 still has not
received that three days later.

This reverts commit 580362b6.