Add a devshell for managing the satellite

.envrc

@@ -0,0 +1,2 @@
+watch_file ./devshells/satellite.nix
+use flake .#satellite

.gitignore

@@ -6,3 +6,4 @@ README.html
 *.log
 .luarc.json
 *.idea
+!.envrc

devshells/bootstrap/shell.nix

@@ -1,7 +1,15 @@
 # Shell for bootstrapping flake-enabled nix and home-manager
-{ pkgs ? (import ./nixpkgs.nix) { }, ... }:
+{
+  pkgs ? (import ./nixpkgs.nix) { },
+  ...
+}:
 pkgs.mkShell {
   # Enable experimental features without having to specify the argument
   NIX_CONFIG = "experimental-features = nix-command flakes";
-  packages = with pkgs; [ nix home-manager git ];
+  packages = with pkgs; [
+    nix
+    home-manager
+    git
+    python3
+  ];
 }

devshells/default.nix

@@ -1,4 +1,4 @@
-args: {
+args: rec {
   haskell = import ./haskell.nix args;
   lua = import ./lua.nix args;
   purescript = import ./purescript.nix args;
@@ -6,4 +6,6 @@ args: {
   typst = import ./typst.nix args;
   web = import ./web.nix args;
   bootstrap = import ./bootstrap/shell.nix args;
+  satellite = import ./satellite.nix args;
+  default = satellite;
 }

devshells/satellite.nix

@@ -0,0 +1,8 @@
+{ pkgs, ... }:
+pkgs.mkShell {
+  packages = with pkgs; [
+    just
+    sops
+    ssh-to-age
+  ];
+}

flake.lock

@@ -1521,11 +1521,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1745526057,
+        "lastModified": 1748370509,
-        "narHash": "sha256-ITSpPDwvLBZBnPRS2bUcHY3gZSwis/uTe255QgMtTLA=",
+        "narHash": "sha256-QlL8slIgc16W5UaI3w7xHQEP+Qmv/6vSNTpoZrrSlbk=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "f771eb401a46846c1aebd20552521b233dd7e18b",
+        "rev": "4faa5f5321320e49a78ae7848582f684d64783e9",
         "type": "github"
       },
       "original": {