flake: add ci binary cache

[marijanp]

• The url and public key allow us to substitute from our CI's nix store
• After discussions with Mark, we figured that the quickest way to accomplish this is by me providing a subdomain