fix(sandbox): narrow trusted-gateway exemption to link-local IPs only #1505

Job	Run time
Resolve PR metadata	7s
build-gateway / Resolve build plan	2s
build-supervisor / Resolve build plan	2s
build-gateway / Rust gateway (arm64) / gateway (arm64)	4m 54s
build-supervisor / Rust sandbox (arm64) / sandbox (arm64)	4m 16s
build-supervisor / Build supervisor (arm64)	1m 22s
build-gateway / Build gateway (arm64)	1m 41s
build-supervisor / Merge ${{ inputs.component }} manifest	0s
e2e / E2E (python)	6m 37s
e2e / E2E (rust-podman)	9m 19s
build-gateway / Merge ${{ inputs.component }} manifest	-1s
e2e / E2E (rust-docker)	7m 30s
	35m 49s

Provide feedback