Detect changes to the underlying nixpkgs to invalidate the cache

[madjar]

For now, the cache only invalidates after one hour, regardless of whether this is actually required or not.