Update BuildBox to 1.2.8

This includes the buildbox-run-bubblewrap fix to drop all Linux capabilities when running as privileged user.

BuildGrid/buildbox/buildbox!625 (merged)

The patches are taken from the pending freedesktop-sdk MR: freedesktop-sdk/freedesktop-sdk!20426 (merged)