fix(ci): isolate agent smoke in namespace-capable helper

scripts/ci/linux-netns-smoke.sh

@@ -24,6 +24,10 @@ export NO_PROXY='*'
 mount --make-rprivate /
 # Agent hardcoded config/state/log paths are private mounts, never host writes.
 for directory in /etc /var/lib /var/log /run; do mount -t tmpfs tmpfs "$directory"; done
+if [[ -n "${EVOFW_TEST_ETC_DATA:-}" ]]; then
+  [[ "$EVOFW_TEST_ETC_DATA" == /work/helper-etc ]]
+  cp "$EVOFW_TEST_ETC_DATA/protocols" "$EVOFW_TEST_ETC_DATA/services" /etc/
+fi
 mkdir -p /etc/evofw /var/lib/evofw
 ip link set lo up
 ip netns add client