Move the flake at the root of the repository

This change simplifies the nix usage so that we can run:

  nix run github:haskell/security-advisories

Author: TristanCacqueray

code/hsec-tools/.envrc renamed to .envrc

@@ -33,16 +33,12 @@ jobs:
       - uses: DeterminateSystems/magic-nix-cache-action@main
       - name: Check Nix flake inputs
         uses: DeterminateSystems/flake-checker-action@v4
-        with:
-          flake-lock-path: ./code/hsec-tools/flake.lock
       - name: Build executable
         run: nix -L build
-        working-directory: ./code/hsec-tools
       - name: Bild docker image
         run: nix build -L '.#packages.x86_64-linux.hsec-tools-image'
-        working-directory: ./code/hsec-tools
       - run: mkdir -p ~/.local/dockerImages
-      - run: cp code/hsec-tools/result ~/.local/dockerImages/hsec-tools
+      - run: cp result ~/.local/dockerImages/hsec-tools
       - id: code-hash
         name: Compute code directory hash
         run: |

.github/workflows/nix.yml

@@ -16,7 +16,7 @@
           pkgs.haskellPackages.developPackage {
             inherit returnShellEnv;
             name = "hsec-tools";
-            root = ./.;
+            root = ./code/hsec-tools;
             withHoogle = false;
             overrides = self: super: with pkgs.haskell.lib; {
               Cabal-syntax = super.Cabal-syntax_3_8_1_0;

code/hsec-tools/shell.nix

@@ -0,0 +1 @@
+(builtins.getFlake ("git+file://" + toString ./.)).devShell.${builtins.currentSystem}