Replace actions/checkout@v4 with a manual token-based clone — its files were being copied into the act_runner workspace instead of the repo, leaving nix to evaluate the wrong flake. Add a workspace inspection step before the build to aid diagnosis.