Wire native network tools into Red Bear profiles

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

config/redbear-full.toml

@@ -14,6 +14,13 @@ include = ["desktop.toml", "redbear-legacy-base.toml", "redbear-legacy-desktop.t
 [general]
 filesystem_size = 2048
 
+[users.messagebus]
+uid = 100
+gid = 100
+name = "messagebus"
+home = "/nonexistent"
+shell = "/usr/bin/ion"
+
 [packages]
 # Red Bear OS branding (os-release, hostname, motd)
 redbear-release = {}
@@ -24,6 +31,12 @@ redbear-hwutils = {}
 # Redox-native netctl compatibility command
 redbear-netctl = {}
 
+# Native network reporting and connect-scan tools
+redbear-netstat = {}
+redbear-traceroute = {}
+redbear-mtr = {}
+redbear-nmap = {}
+
 # Terminal file manager (Midnight Commander port)
 mc = {}
 
@@ -37,9 +50,15 @@ firmware-loader = {}
 evdevd = {}
 udev-shim = {}
 
+# Desktop/session plumbing
+dbus = {}
+
 # Diagnostic tool
 redbear-info = {}
 
+# IOMMU validation surface
+iommu = {}
+
 # Process monitor
 htop = {}
 
@@ -55,10 +74,6 @@ qtbase = {}
 # RBOS meta-package — temporarily disabled (depends on GPU stack via redox-driver-sys)
 # redbear-meta = {}
 
-# Workaround: bash fails to cross-compile (upstream mkbuiltins.c issue)
-# ion (from minimal) is the default shell anyway
-bash = "ignore"
-
 # Firmware directory for AMD/Intel GPU blobs
 [[files]]
 path = "/usr/firmware/amdgpu"
@@ -117,3 +132,47 @@ cmd = "getty"
 args = ["/scheme/debug/no-preserve", "-J"]
 type = "oneshot_async"
 """
+
+[[files]]
+path = "/usr/lib/init.d/12_dbus.service"
+data = """
+[unit]
+description = "D-Bus system bus"
+requires_weak = [
+    "10_net.target",
+]
+
+[service]
+cmd = "ion"
+args = [
+    "-c",
+    "mkdir -p /var/lib/dbus /run/dbus; rm -f /run/dbus/pid; dbus-uuidgen --ensure; dbus-daemon --system",
+]
+type = "oneshot_async"
+"""
+
+[[files]]
+path = "/var/lib/dbus"
+data = ""
+directory = true
+mode = 0o755
+
+[[files]]
+path = "/run/dbus"
+data = ""
+directory = true
+mode = 0o755
+
+[[files]]
+path = "/usr/lib/init.d/13_iommu.service"
+data = """
+[unit]
+description = "IOMMU DMA remapping daemon"
+requires_weak = [
+    "00_pcid-spawner.service",
+]
+
+[service]
+cmd = "/usr/lib/drivers/iommu"
+type = "oneshot_async"
+"""