car-sandbox 0.27.0

Sandboxed execution surface for CAR — process isolation primitives for untrusted agent steps