upgrade to NixOS 22.11

- switch nix config to generator
- temporarily disable subsurface due to insecure qtwebkit dependency
- disable tlp (but keep config) to try out power-profile daemon instead
- bump nixos-hardware revision

nixos/hardware-configuration.nix

@@ -11,7 +11,7 @@ in
       (
         builtins.fetchGit {
           url = "https://github.com/NixOS/nixos-hardware";
-          rev = "d38958a6aa5bdbf3239f26a04689f3d9ae7da0c0";
+          rev = "7883883d135ce5b7eae5dce4bfa12262b85c1c46";
         } + "/lenovo/thinkpad/t440s"
       )
     ];
@@ -84,7 +84,7 @@ in
       { device = "/dev/disk/by-uuid/bf928178-4e92-4e7e-8df2-18fbd658eecf"; }
     ];
 
-  nix.maxJobs = lib.mkDefault 4;
+  nix.settings.max-jobs = lib.mkDefault 4;
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
 
   hardware.trackpoint = {