[Bug]: on macOS Sequoia cannot ping out from container (but DNS works!)

### I have done the following

- [x] I have searched the existing issues
- [ ] If possible, I've reproduced the issue using the 'main' branch of this project

### Steps to reproduce

```sh
% container run --rm alpine:3.20 ping google.com
PING google.com (142.250.81.238): 56 data bytes
--- google.com ping statistics ---
15 packets transmitted, 0 packets received, 100% packet loss
% ping google.com
PING google.com (142.250.81.238): 56 data bytes
64 bytes from 142.250.81.238: icmp_seq=0 ttl=119 time=8.748 ms
64 bytes from 142.250.81.238: icmp_seq=1 ttl=119 time=9.641 ms
```

In an earlier boot of the system, I was able to get this working through _some_ combination of `container system stop`, `pkill -f container-network-vmnet`, `container builder {stop,start,delete}`, but now that doesn't work either.

### Current behavior

Ping times out.

### Expected behavior

Ping doesn't time out.

### Environment

```markdown
- OS: Darwin L03G26TD12 24.5.0 Darwin Kernel Version 24.5.0: Tue Apr 22 19:53:27 PDT 2025; root:xnu-11417.121.6~2/RELEASE_ARM64_T6041 arm64
- Xcode: CLT only
- Container: container CLI version 0.2.0 (build: release, commit: 3b5c253)
```

### Relevant log output

```shell

```

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct