Function restricts_network_mode 

pub fn restricts_network_mode(stack: &Stack, targets_kubernetes: bool) -> bool

Whether the artifact being rendered restricts which network modes it accepts.

Cloud setup needs explicit subnets for private databases and restricted sandbox connectors. Kubernetes targets do not emit these cloud backends.