programs: sane-private-do: grant net access

crucial for e.g. sane-private-do git push

hosts/common/programs/sane-scripts.nix

@@ -132,6 +132,7 @@ in
       capabilities = [ "sys_admin" ];
       # `sane-private-do` acts as a launcher, so give it access to anything it could possibly need.
       # (crucially, that includes the backing store)
+      net = "all";
       extraPaths = [ "/" ];
     };
     "sane-scripts.private-lock".sandbox.enable = false;