Keep builds out of CI: treat pipelines as disposable schedulers
A concise argument that CI's only job is scheduling, so workflow files should be a single command (like "nix build") while all toolchain work lives in Docker, Nix, or a Makefile you control. The payoff: builds run locally, and a GitHub Actions outage never blocks delivery.