fix: install less browser packages in reader

The state browse.install installs extraneous packages that we won't
need for an untrusted environment, such as USB and audio support.

salt/reader/README.md

@@ -43,6 +43,9 @@ originator/client did no trust to open in its environment. When you run
 `default_dispvm`, it will open the file to be read in a disposable based on
 `dvm-reader`.
 
+By default, there is no `netvm`, thus allowing you to set the networking chain
+you want before the disposable makes a connection.
+
 ## Credits
 
 - [Unman](https://github.com/unman/shaker/tree/main/reader)

salt/reader/install.sls

@@ -7,9 +7,6 @@ SPDX-License-Identifier: AGPL-3.0-or-later
 
 {% if grains['nodename'] != 'dom0' -%}
 
-include:
-  - browser.install
-
 "{{ slsdotpath }}-updated":
   pkg.uptodate:
     - refresh: True
@@ -20,6 +17,9 @@ include:
     - install_recommends: False
     - skip_suggestions: True
     - pkgs:
+      - qubes-core-agent-networking
+      - ca-certificates
+      - firefox-esr
       - libreoffice
       - antiword
       - evince