SearXNG quadlet: use AddDevice= (the generator rejects Device=)

Device= in [Container] is a [Volume]-group key; the container device key is
AddDevice= (maps to podman --device). Update the /dev/net/tun device line and
the test seam.

tests/searxng_quadlet.bats

@@ -39,8 +39,8 @@ QDIR="$REPO_ROOT/dankclaw/searxng/quadlet"
 @test "gluetun has NET_ADMIN and the /dev/net/tun device" {
     grep -qE '^AddCapability=NET_ADMIN' "$QDIR/gluetun.container" \
         || { echo "gluetun.container must set AddCapability=NET_ADMIN"; return 1; }
-    grep -qE '^Device=/dev/net/tun' "$QDIR/gluetun.container" \
-        || { echo "gluetun.container must set Device=/dev/net/tun"; return 1; }
+    grep -qE '^AddDevice=/dev/net/tun' "$QDIR/gluetun.container" \
+        || { echo "gluetun.container must set AddDevice=/dev/net/tun"; return 1; }
 }
 
 @test "valkey joins searxng.network and is reachable by the name valkey" {