fix(security): remove container daemon group access

outputs/x86_64-linux/tests/security-container-groups/expected.nix

@@ -0,0 +1,4 @@
+{
+  userHasDockerAccess = false;
+  userHasPodmanAccess = false;
+}

outputs/x86_64-linux/tests/security-container-groups/expr.nix

@@ -0,0 +1,8 @@
+{ outputs, ... }:
+let
+  userGroups = outputs.nixosConfigurations.ai-niri.config.users.users.ryan.extraGroups;
+in
+{
+  userHasDockerAccess = builtins.elem "docker" userGroups;
+  userHasPodmanAccess = builtins.elem "podman" userGroups;
+}