Adding in basic sandbox interface class + CI

Sandbox has two implementations: bwrap and chroot

Bwrap has quite a comprehensive implementation, whereas chroot just covers the basic directory mappings/mounts.