TODO: `flakecheck` binary should restrict its own memory

[raf]

nix flake check has been leaking memory for me for the past 3 or so versions. The function should run with limited memory (ideally as an argument) to avoid OOMing the system.