Bug 1889045 - Update sandbox policies for `epoll_pwait2`. r=gcp

Note that this can't easily be unit-tested, because the tests can't
distinguish between the real `ENOSYS` from lack of kernel support and
the fake `ENOSYS` from the sandbox.

Differential Revision: https://phabricator.services.mozilla.com/D208823