Allow pups to request access to the internet

[SomeoneWeird]

Adds a new manifest field .container.requiresInternet that whitelists the pup to allow traffic outbound to the internet.

This still blocks traffic inbound, and still blocks talking directly to other pups on 10.69.0.0/16