feat: Add Sandbox Inspection and Debugging Commands (#261)

* feat: add sandbox DX commands

* fix: Linter errors

* fix: Sandbox deny log parsing

* fix: Sandbox docs

* refactor: Maintain SSOT across pkg dependencies

* fix: Linter errors

sandbox/platform/testdata/bubblewrap_minimal.argv

@@ -0,0 +1,58 @@
+--ro-bind-try
+/usr
+/usr
+--ro-bind-try
+/lib
+/lib
+--ro-bind-try
+/lib64
+/lib64
+--ro-bind-try
+/bin
+/bin
+--ro-bind-try
+/sbin
+/sbin
+--ro-bind-try
+/etc
+/etc
+--ro-bind-try
+/opt
+/opt
+--ro-bind-try
+/var/lib
+/var/lib
+--ro-bind-try
+/sys
+/sys
+--dev-bind-try
+/dev/null
+/dev/null
+--dev-bind-try
+/dev/zero
+/dev/zero
+--dev-bind-try
+/dev/random
+/dev/random
+--dev-bind-try
+/dev/urandom
+/dev/urandom
+--dev-bind-try
+/dev/full
+/dev/full
+--dev-bind-try
+/dev/tty
+/dev/tty
+--proc
+/proc
+--unshare-net
+--unshare-pid
+--unshare-ipc
+--new-session
+--die-with-parent
+--ro-bind-try
+/tmp
+/tmp
+--bind
+/tmp
+/tmp