Add missing nixery deps for CI coverage check
check-coverage uses grep, awk, and tr, which aren't in a bare nixery
go image. Also stopped running go test twice — check-coverage already
runs it internally.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>