Our regular updates fill up the servers' boot partitions

Our storage servers have separate boot partitions, and they fill over time with our weekly NixOS updates to be cleaned out manually.

Automate the removing of old kernels.