fix(nixpak): allow WebKit network portals for slicers

hardening/nixpaks/modules/portal-groups.nix

@@ -17,6 +17,10 @@ let
       "Notification.AddNotification"
       "Notification.RemoveNotification"
     ];
+    webkit = [
+      "NetworkMonitor.GetStatus"
+      "ProxyResolver.Lookup"
+    ];
     screenCast = [
       "ScreenCast.CreateSession"
       "ScreenCast.SelectSources"

hardening/nixpaks/modules/slicer-policy.nix

@@ -41,6 +41,7 @@ in
       openUri = true;
       notifications = true;
       inputMethod = true;
+      webkit = true;
     };
     desktopIntegration = {
       notifications = true;

hardening/tests/policy/bambu-studio.nix

@@ -17,6 +17,7 @@ mkAppPolicy "bambu-studio" {
     fileChooser = app.portalGroups.fileChooser;
     openUri = app.portalGroups.openUri;
     inputMethod = app.portalGroups.inputMethod;
+    webkit = app.portalGroups.webkit;
     accessibility = app.desktopIntegration.accessibility;
   };
 }

hardening/tests/policy/orca-slicer.nix

@@ -17,6 +17,7 @@ mkAppPolicy "orca-slicer" {
     fileChooser = app.portalGroups.fileChooser;
     openUri = app.portalGroups.openUri;
     inputMethod = app.portalGroups.inputMethod;
+    webkit = app.portalGroups.webkit;
     accessibility = app.desktopIntegration.accessibility;
   };
 }