Restrict filesets even more by avoiding test files that are unecessary inside the test

deployment/check/basic/nixosTest.nix

@@ -1,10 +1,15 @@
-{ inputs, ... }:
+{ inputs, lib, ... }:
 
 {
   _class = "nixosTest";
 
   name = "deployment-basic";
 
+  sourceFileset = lib.fileset.unions [
+    ./constants.nix
+    ./deployment.nix
+  ];
+
   nodes.deployer =
     { pkgs, ... }:
     {

deployment/check/cli/nixosTest.nix

@@ -17,6 +17,9 @@ in
   name = "deployment-cli";
 
   sourceFileset = lib.fileset.unions [
+    ./constants.nix
+    ./deployments.nix
+
     # REVIEW: I would like to be able to grab all of `/deployment` minus
     # `/deployment/check`, but I can't because there is a bunch of other files
     # in `/deployment`. Maybe we can think of a reorg making things more robust

deployment/check/common/nixosTest.nix

@@ -72,8 +72,11 @@ in
       ../../../flake.lock
       ../../../npins
 
-      ./.
-      config.pathToCwd
+      ./sharedOptions.nix
+      ./targetNode.nix
+      ./targetResource.nix
+
+      (config.pathToCwd + "/flake-under-test.nix")
     ];
 
     acmeNodeIP = config.nodes.acme.networking.primaryIPAddress;

deployment/check/panel/nixosTest.nix

@@ -126,6 +126,9 @@ in
   name = "deployment-panel";
 
   sourceFileset = lib.fileset.unions [
+    ./constants.nix
+    ./deployment.nix
+
     # REVIEW: I would like to be able to grab all of `/deployment` minus
     # `/deployment/check`, but I can't because there is a bunch of other files
     # in `/deployment`. Maybe we can think of a reorg making things more robust