Add a CI step to check significant package output changes resulting from changes to `patches.nix`

[sdankel]

@mitchmindtree mentioned that nix flake show can tell us which packages would be changed by refresh-manifest.sh.

We could add this to PRs to show this output to help us catch any issues with patch changes.