Also use check-flake for .#check package. Deal with network access by disabling sandbox, and excluding in garnix.
Also add garnix checks.
* Add garnix.yaml * enable M1 shell