Nix buildstack next step : have and use qemu-canokey non-existing pre-compiled qemu/kvm in docker image

[tlaurion]

This is to be able to have complete testing kit (outside of reverse HOTP) support to test GPG functions as well without requiring physical USB Security dongle.

This means that all qemu-(fb)whiptail-tpm(1/2) boards will be testable without any USB Security dongle since we have swtpm and will have canokey-qemu (lib) with qemu configured and compiled in with canokey support

---

This is mitigation of canokeys/canokey-qemu#6 since qemu-canokey derivative doesn't exist under nix pkgs