bug: pw_shell edge cases unhandled

[eureka-cpu]

/noshell (and /sbin/nologin) both indicate the user has no interactive shell assigned, so defaulting to a store bash via nix-build in that case makes sense I think