fix: resolve code quality issues, add CI, and improve maintainability

- Remove useless nixConfig block (cache.nixos.org is default)
- Remove manual container-use override; let blueprint auto-discover it
- Add nixosModules.default so README example works
- Fix default launcher: use correct parameterized flake URL
- Replace deprecated sha256 with hash in goose-cli fetchers
- Fix LIBCLANG_PATH to include /lib subdirectory for libclang.so
- Drop --release from goose-cli tests (faster, more debug info)
- Use builtins.toFile in flake-inputs to avoid ARG_MAX risk
- Add lib.warn when overlay has no packages for a system
- Add passthru.updateScript to goose-cli, container-use, skillsmcp
- Fix skillsmcp version to 0.2.0+unstable (pinned to commit, not tag)
- Replace with lib; with explicit references in all meta blocks
- Add update.py script for goose-cli (referenced in AGENTS.md)
- Expand .gitignore with result-* and .direnv/
- Add GitHub Actions CI workflow (nix flake check + build)

packages/goose-cli/update.py

@@ -0,0 +1,26 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i python3 -p python3 nix-update
+
+"""
+Update script for goose-cli package.
+
+This script uses nix-update to fetch the latest version of goose-cli
+and update the package.nix file with the new version, src hash, and cargoHash.
+It also updates the librusty_v8 hashes via the custom fetchers.nix.
+
+Usage:
+    ./update.py              # Update to latest release
+    ./update.py --version 1.34.0  # Update to specific version
+"""
+
+import subprocess
+import sys
+
+
+def main():
+    args = ["nix-update", "--flake", ".#goose-cli"] + sys.argv[1:]
+    subprocess.check_call(args)
+
+
+if __name__ == "__main__":
+    main()