ethtool: sandbox with bwrap

it doesn't *quite* sandbox with bunpen: i lose Wake-on-lan info... not sure why

hosts/common/programs/assorted.nix

@@ -540,8 +540,9 @@ in
     # TODO: package [smile](https://github.com/mijorus/smile) for probably a better mobile experience.
     emote.persist.byStore.plaintext = [ ".local/share/Emote" ];
 
-    ethtool.sandbox.method = "landlock";
+    ethtool.sandbox.method = "bwrap";
     ethtool.sandbox.capabilities = [ "net_admin" ];
+    ethtool.sandbox.net = "all";
 
     evtest.sandbox.method = "bunpen";
     evtest.sandbox.autodetectCliPaths = "existingFile";  # `evtest /dev/foo` to monitor events for a specific device