Function restricts_network_mode 

pub fn restricts_network_mode(stack: &Stack, targets_kubernetes: bool) -> bool

Whether the artifact being rendered restricts which network modes it accepts.

Cloud setup needs explicit subnets for restricted sandbox connectors. Kubernetes targets do not emit these cloud backends.