Using the Form plugin it is easy to make custom form actions that can run oc commands. It can be secured with default Grav security such as having the page behind a password or only logged in users can visit. It is better to use the remote Nextcloud api then having it on the same server.