Zola and Pagefind are run ad-hoc for now (Pagefind via npx, Zola from a downloaded release binary in CI). Toolchain versions aren't pinned yet.
Nix is planned to pin exact Zola/Pagefind versions for both local dev and CI, so the "curl latest Zola release" step in CI stops being a moving target — not set up yet.