So expand it ourselves

GitLab docs explicitly say `needs` does not require stages but GitLab actual behavior is:

```
Found errors in your .gitlab-ci.yml:

    update-staging job needs system-tests job, but system-tests is not in any previous stage
    update-staging job needs morph-build-staging job, but morph-build-staging is not in any previous stage

```

The default is `when: "on_success"` which is equivalent to "always" since we
have no stages.

Some terminal code stripping logic added though

now that default.nix is actually somewhat useful

`cp --recursive ...` is required for permission issues
`... --out-link result-docs` is required for path collision issues
the rest is at my discretion

Quotes required for correct operation if there are spaces or some other
shell-special characters

This makes it easier to test outside of GitLab and it also means we don't
depend on whatever wacko shell settings we inherit from GitLab.

`name` does not exist.  I think the `environment` section of the configuration
tricked me.

Just use the configured temporary directory in the environment.  This is less
great but it's still okay because:

* It's our system
* The deploy key has limited capabilities