imp: configure deployer as nix binary cache for cluster
Set up ssh-ng substituter on deployer with signing key so all cluster nodes can pull build artifacts directly, reducing redundant builds. Adds nix and openssh to nomad extra packages for substituter access.