Function init_sandbox 

pub fn init_sandbox(
    mode: SandboxMode,
    workspace: PathBuf,
    credentials_dir: PathBuf,
    deny_paths: Vec<PathBuf>,
)

Called once from the gateway to initialize the sandbox.