nixpkgs moves from 2026-10-17 to 2026-11-01. Also updated: nix-amd-ai
and sops-nix.
Fallout handled in the same commit so every revision builds:
- tlp-profile-switcher was dropped from nixpkgs (upstream declares only
GNOME 48) and aider-chat's posthog dependency is broken on Python
3.14; take both from the previous nixpkgs until they evaluate again.
- NSS 3.131.1 removed "emSign ECC Root CA - G3", and a blacklist entry
for a missing root fails the cacert build; drop it.
- A cached firefox-devedition is back in nixpkgs, so remove the
2026-07-05 pin.
Assisted-by: Claude:opus-5-5