Make nix hash update dependent on changelog regen

I think there's a race condition with generating tokens here maybe... IT FUCKING WORKS FINE LOCALLY. SEE 2cbbe3e

.github/workflows/ci-pipeline.yml

@@ -2322,9 +2322,9 @@ jobs:
 
   update-nix:
     name: Update Nix SHA
-    needs: deploy-tgs
+    needs: changelog-regen
     runs-on: ubuntu-latest
-    if: (!(cancelled() || failure())) && needs.deploy-tgs.result == 'success'
+    if: (!(cancelled() || failure())) && needs.changelog-regen.result == 'success'
     steps:
       - name: Install Native Packages # Name checked in rerunFlakyTests.js
         run: |