fix: push kubenixCI2 closure to cachix in build-manifests step

The nocache CI variant was failing because its nodeEnv store path was
never pushed to cachix. The push script runs on both amd64 and arm64
runners, so kubenixCI2 (x86_64-only) cannot be added there. Instead,
add a dedicated step in build-manifests (ubuntu-latest, x86_64) that
builds kubenixCI2.deploymentScript and pushes its closure to cachix.

Author: Lillecarl

.github/workflows/ci.yaml

@@ -98,6 +98,10 @@ jobs:
           unlink nix-scratches || true
           nix build --show-trace --file . scratchImage.push --out-link nix-scratches
           ./nix-scratches/bin/push
+      - name: Push nocache variant store paths
+        run: |
+          DRV=$(nix-store -qd $(nix build --no-link --print-out-paths --file . kubenixCI2.deploymentScript 2>/dev/null))
+          nix-store -qR --include-outputs "$DRV" | grep -v '\.drv$' | cachix push nix-csi
   test-kind-cache:
     needs: build-manifests
     runs-on: ubuntu-latest

default.nix

@@ -149,9 +149,7 @@ rec {
         #! ${pkgs.runtimeShell}
         export PATH=${lib.makeBinPath [ pkgs.cachix ]}:$PATH
         # ${lib.concatStrings (lib.attrValues inputs)}
-        for drv in ${kubenixPush.deploymentScript} ${kubenixCI2.deploymentScript}; do
-          nix-store -qR --include-outputs $(nix-store -qd "$drv") | grep -v '\.drv$' | cachix push nix-csi
-        done
+        nix-store -qR --include-outputs $(nix-store -qd ${kubenixPush.deploymentScript}) | grep -v '\.drv$' | cachix push nix-csi
       '';
 
   # Push environments for both x86_64-linux and aarch64-linux to cachix.