fast-forward triggers a rebase which is not allowed in this repo.
Switch from a flake ref to a github ref as renovate cannot resolve flake refs, and they are slightly impure. This shows some issues with the previous patch to the bind module which we fix.
This should make it easier to keep the repo up to date.