This does a bit more than advertised, since this also switches to a
different set of Bazel package building infrastructure that I'm hoping
will be more extensible than buildBazelPackage as it exists in nixpkgs
today.
In any case, the FOD here _seems_ to be much more stable than that
previously produced by the old approach, but no promises :)
