fix: sandbox NSS error in container (ignore-certificate-errors)

Author: Shikakiben

main.js

@@ -79,8 +79,10 @@ app.commandLine.appendSwitch('log-level', '3');
 
 // Fix NSS pour distrobox/conteneurs : utiliser une base de données NSS en mémoire
 // Évite les conflits avec la base NSS de l'hôte partagée via /home
-if (fs.existsSync('/run/.containerenv') || fs.existsSync('/run/.toolboxenv') || process.env.container === 'podman' || process.env.container === 'docker') {
+if (fs.existsSync('/run/.containerenv') || fs.existsSync('/run/.toolboxenv')) {
   app.commandLine.appendSwitch('use-mock-keychain');
+  app.commandLine.appendSwitch('ignore-certificate-errors-spki-list');
+  app.commandLine.appendSwitch('ignore-certificate-errors');
 }
 
 const errorLogPath = path.join(app.getPath('userData'), 'error.log');
@@ -1052,7 +1054,6 @@ ipcMain.handle('sandbox-configure', async (event, payload = {}) => {
   else if (payload.configureDirs === false) shouldConfigure = false;
   else shouldConfigure = hasDirSelection || hasCustomPath;
   const stdinScript = buildSandboxAnswerScript(shouldConfigure, dirSelections, customCheck.value);
-
   const args = ['--sandbox', normalizedName];
   const result = await runSandboxTask(event.sender, {
     pm,
@@ -1070,7 +1071,6 @@ ipcMain.handle('sandbox-disable', async (event, payload = {}) => {
   if (!pm) return { ok: false, error: 'missing-pm' };
   const normalizedName = typeof payload.appName === 'string' ? payload.appName.trim() : '';
   if (!normalizedName) return { ok: false, error: 'invalid-app' };
-
   const args = ['--disable-sandbox', normalizedName];
   const result = await runSandboxTask(event.sender, {
     pm,