add guix-based pipeline building a tarball

the build artefacts should be relocatable and run on (almost?) every
system that has a linux kernel underneath.