Right now the only way to discover the IP address assigned to a vznat or vmnet interface is by running ip a inside the instance and parsing the output.
It would be nice if the guestagent would report this back to the hostagent, and limactl list could include this information.