Problem: Zarith (so, Tezos) does not build in the Nix sandbox
That's because in the sandbox there is no /usr/bin/env.
Solution: Make all OPAM packages run patchShebangs in postPatch.
If any package redefines postPatch, the package's own postPatch takes priority.