chore(wechat): use nixpkgs-master now that NixOS/nixpkgs#560225 is merged

hardening/README.md

@@ -108,7 +108,7 @@ All browsers get read-only NSS certificates, printing, native notifications and
   and user workflows still need confirmation.
 - Chromium smoke test passed: renderer sandbox, environment clearing, bind scope, disposable-profile
   persistence and loopback policy.
-- WeChat uses the native nixpkgs-patched package with nixpak as the only bwrap layer. Build/policy
+- WeChat uses the native nixpkgs-master package with nixpak as the only bwrap layer. Build/policy
   pass; interactive Wayland validation is still pending.
 - Evidence and repeat commands: [runtime validation](tests/runtime-validation.md),
   [policy test](tests/policy.nix), which auto-loads every suite under [tests/policy](tests/policy/).

hardening/nixpaks/default.nix

@@ -1,7 +1,6 @@
 {
   pkgs,
   pkgs-master,
-  pkgs-patched,
   pkgs-stable,
   pkgs-blender,
   nixpak,
@@ -39,7 +38,7 @@ in
         musescore = wrapper pkgs-stable ./musescore.nix;
         mpv = wrapper super ./mpv.nix;
         imv = wrapper super ./imv.nix;
-        wechat = wrapper pkgs-patched ./wechat.nix;
+        wechat = wrapper pkgs-master ./wechat.nix;
       };
     })
   ];