9e3aaa5a

By: Greg Pfeil <greg@technomadic.org>

Do better at tracking checks excluded by CI

Now that Flaky is using `recusive-nix`, `__noChroot` is no longer enough to
decide what CI can and can’t build. This now covers `requiredSystemFeatures` and
extracts some previously-duplicated code to a library.