fix: AppImage required --no-sandbox

Not tested enough but works on my machine

electron/app/flags.ts

@@ -4,7 +4,6 @@ import { readDesktopSettings } from '../desktop-settings';
 
 export function configureAppFlags(): void {
   configureDesktopBranding();
-  linuxSpecificFlags();
   networkFlags();
   setupGpuEncodingFlags();
   chromiumFlags();
@@ -21,6 +20,10 @@ function chromiumFlags(): void {
   const enabledFeatures: string[] = [];
 
   if (process.platform === 'linux') {
+    // Sandbox and Ozone platform selection happen before this file runs. The
+    // packaged launcher script and the dev launch scripts pass those switches
+    // on the real command line instead.
+
     // PipeWire-based audio pipeline for screen share audio capture
     enabledFeatures.push('AudioServiceOutOfProcess');
     // PipeWire-based screen capture so the xdg-desktop-portal system picker works
@@ -38,20 +41,6 @@ function chromiumFlags(): void {
   }
 }
 
-function linuxSpecificFlags(): void {
-  if (process.platform !== 'linux') {
-    return;
-  }
-
-  // Disable sandbox on Linux to avoid SUID / /tmp shared-memory issues
-  app.commandLine.appendSwitch('no-sandbox');
-  app.commandLine.appendSwitch('disable-dev-shm-usage');
-
-  // Chromium chooses the Linux Ozone platform before Electron runs this file.
-  // The launch scripts pass `--ozone-platform=wayland` up front for Wayland
-  // sessions so the browser process selects the correct backend early enough.
-}
-
 function networkFlags(): void {
   // Accept self-signed certificates in development (for --ssl dev server)
   if (process.env['SSL'] === 'true') {