feat : adds pipx support to PMG (#292)

* adding the pipx support to project

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

* create excutors for pipx

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

* add pipx yml

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

* chores

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

* pipx to use standard executor pattern

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

* Address PR feedback for pipx support

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

* Update pipx flags comments

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>

---------

Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com>
Co-authored-by: Abhisek Datta <abhisek.datta@gmail.com>
Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com>

sandbox/profiles/pipx.yml

@@ -0,0 +1,33 @@
+name: pipx
+description: Profile for pipx executor with write access to current directory
+inherits: pypi-restrictive
+
+package_managers:
+  - pipx
+
+# pipx requires PTY access to work, especially for commands like:
+# pipx run cowsay hello
+#
+# Explicitly setting this so that it is enabled even if we decide to turn this off
+# in parent profiles in the future.
+allow_pty: true
+
+# pipx-executed tools may need to bind to localhost ports (e.g., dev servers)
+allow_network_bind: true
+
+filesystem:
+  allow_read:
+    # pipx installs and manages packages in ~/.local/pipx
+    - ${HOME}/.local/pipx/**
+    - ${HOME}/.local/bin/**
+
+  # Add write permissions for pipx-specific paths
+  allow_write:
+    - ${CWD}/**
+    - ${HOME}/.local/pipx/**
+    - ${HOME}/.local/bin/**
+
+  # Additional deny rules for extra security
+  deny_write:
+    - ${CWD}/.env
+    - ${CWD}/.env.*