Container backend: Run commands using ‘nixos-container run’

I.e. ‘nsenter’. This way, the container doesn't need to have an SSH
daemon, or even a working network connection.