`nixos-rebuild switch` alone leaves the flake implicit, which is not how this system is built. Name it explicitly, taking the host from the configuration that installs the shell so the two cannot disagree. The reference stays relative, so `update` rebuilds the working tree the shell is standing in rather than a fixed checkout.