chore: various minor GPU sandbox improvements

[RKNF404]

• Remove syscalls already in the baseline seccomp policy
• Add only the blocked syscall argument for fcntl to the baseline policy (rather than granting the GPU process fcntl unrestricted)
• Use OzonePlatform::RunningOnWaylandForTest() directly instead of checking the commandline flag for Wayland

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}