now that default.nix is actually somewhat useful

`cp --recursive ...` is required for permission issues
`... --out-link result-docs` is required for path collision issues
the rest is at my discretion

Quotes required for correct operation if there are spaces or some other
shell-special characters

This makes it easier to test outside of GitLab and it also means we don't
depend on whatever wacko shell settings we inherit from GitLab.

`name` does not exist.  I think the `environment` section of the configuration
tricked me.

Just use the configured temporary directory in the environment.  This is less
great but it's still okay because:

* It's our system
* The deploy key has limited capabilities

docs.nix used to use <nixpkgs> so maybe that was why