Host: migrate from nix_shell to run_cmd

pkgs/clan-cli/clan_cli/nix/__init__.py

@@ -105,6 +105,7 @@ def nix_metadata(flake_url: str | Path) -> dict[str, Any]:
     return data
 
 
+# Deprecated: use run_cmd() instead
 def nix_shell(packages: list[str], cmd: list[str]) -> list[str]:
     # we cannot use nix-shell inside the nix sandbox
     # in our tests we just make sure we have all the packages

pkgs/clan-cli/clan_cli/nix/allowed-programs.json

@@ -12,6 +12,7 @@
   "pass",
   "sops",
   "sshpass",
+  "netcat",
   "tor",
   "virtiofsd",
   "zbar",