Add statically linked binary

Fixes #6 (closed)

I created a separate naersk expression to ensure that users who just want to run or install the regular binary don't have to download the additional toolchain, but still allow building the static binary on all platforms.

I also took this opportunity to fix the double-locked nixpkgs instance, see the diff for the flake.lock.