container: optionally isolate host abstract UNIX domain sockets via landlock

package.nix

@@ -89,7 +89,8 @@ buildGoModule rec {
     GO_TEST_SKIP_ACL = 1;
   };
 
-  buildInputs = [
+  buildInputs =
+    [
       libcap
       libffi
       libseccomp
@@ -136,7 +137,8 @@ buildGoModule rec {
         }
     '';
 
-  passthru.targetPkgs = [
+  passthru.targetPkgs =
+    [
       go
       gcc
       xorg.xorgproto