fix(vm): enable NFT_LOG kernel module for nftables bypass detection

The nftables log statement requires CONFIG_NFT_LOG, which was not
included in the VM guest kernel config. Without it, nft rejects
rules containing the log keyword with "No such file or directory".

Author: russellb

crates/openshell-driver-vm/runtime/kernel/openshell.kconfig

@@ -79,6 +79,7 @@ CONFIG_NFT_NUMGEN=y
 CONFIG_NFT_FIB_IPV4=y
 CONFIG_NFT_FIB_IPV6=y
 CONFIG_NFT_LIMIT=y
+CONFIG_NFT_LOG=y
 CONFIG_NFT_REDIR=y
 CONFIG_NFT_TPROXY=y