Function run_script_sandboxed 

pub fn run_script_sandboxed(
    run: &ScriptRun,
    sandbox: &Sandbox,
    plugin_dir: &Path,
    network: bool,
    cancelled: &dyn Fn() -> bool,
) -> Result<ScriptOutcome, String>

Run a script in sandbox: read the system, the plugin folder and the interpreter; read+write run.cwd (the workspace) and a private temp folder; network only if network. The environment is reset to a minimal one plus run.env.