Grant network access so update checks can reach GitHub (#1502)

packaging/linux/flatpak/ai.storyteller.deckcraft.bundle.yml

@@ -31,9 +31,9 @@ finish-args:
   # document portal, so picked files work anywhere without broad filesystem access. Documents is
   # granted so decks passed by path (the command line, Open Recent) work in the usual place.
   - --filesystem=xdg-documents
-  # Deliberately not granted: network (the optional --control server listens on 127.0.0.1 in
+  # Network: update checks reach GitHub. The optional --control server still listens on 127.0.0.1
-  # the sandbox; `flatpak override --user --share=network ai.storyteller.deckcraft` exposes it to
+  # only. Home/host filesystem access is deliberately not granted.
-  # host agents) and home/host filesystem access.
+  - --share=network
 modules:
   - name: deckcraft
     buildsystem: simple

packaging/linux/flatpak/ai.storyteller.deckcraft.yml

@@ -32,9 +32,9 @@ finish-args:
   # document portal, so picked files work anywhere without broad filesystem access. Documents is
   # granted so decks passed by path (the command line, Open Recent) work in the usual place.
   - --filesystem=xdg-documents
-  # Deliberately not granted: network (the optional --control server listens on 127.0.0.1 in
+  # Network: update checks reach GitHub. The optional --control server still listens on 127.0.0.1
-  # the sandbox; `flatpak override --user --share=network ai.storyteller.deckcraft` exposes it to
+  # only. Home/host filesystem access is deliberately not granted.
-  # host agents) and home/host filesystem access.
+  - --share=network
 build-options:
   append-path: /usr/lib/sdk/rust-stable/bin
 modules: