feat(sandbox): spike Landlock non-docker sandbox PoC (MCP-34.1)

feat(sandbox): spike Landlock non-docker sandbox PoC (MCP-34.1) #668