Centralize call to setup-nix-environment

before_script and script just get merged, so unless we're setting some
default somewhere we don't need it. And in fact, every user of .build
was doing the same thing, so we can just do it in one place: .build.