car-sandbox 0.31.0

Sandboxed execution surface for CAR — process isolation primitives for untrusted agent steps