The workspace pulls jack-sys through rodio -> cpal, which links libjack at build time. Without libjack2 in buildInputs the sandboxed cargo build fails to link the JACK audio backend. Add it so the flake builds.
