935b023 patched radicle-job to a git source, so Cargo.lock now carries
a git+https entry. importCargoLock cannot vendor a git dependency
without an explicit hash.
Refactor the radicle-desktop build function in the flake by splitting it into
an external file. Use file-based scoping to prevent access to global symbols
within the build function.