[Bug Report] Expiring advanced view pop-up will create blanket deny rule for application of "Destination IP" is not checked

### Describe the bug:

This is a follow-up to #1368.

- OpenSnitch version: 1.7.0
- OS: Ubuntu 25.04
- Window Manager: KDE 6
- Kernel version: `6.14.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Wed May 21 15:01:51 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux`

### To Reproduce:

1. Configure the Pop-up defaults to deny, forever, by executable, and in `More`: `Show advanced view by default`, and leave `Destination IP` unchecked (default)
2. Have an application connect to a new domain (no rule matches it)
3. Let the pop-up timer expire. The pop-up will close.
4. Under Rules -> Application rules -> Permanent, notice the new `deny` rule for the application, regardless of IP.

### Expected behavior (optional):

The rule should be temporary, "once", not permanent.

OpenSnitch creating a permanent `deny` rule for the executable regardless of the IP is a major problem if the pop-up is displayed when the machine is unattended. As a workaround, `Destination IP` can be checked, but this setting isn't easily discoverable.

### Screencast

https://github.com/user-attachments/assets/34b15590-5198-4a69-9efc-5285154696a4