- Introduce an unstable `sandbox` subcommand with initial implementation.
- Fix numerous bugs across core functionality, CLI, extensions, telemetry, networking, and runtime (e.g., audit deserialization, JSX import handling, Deno tunnel token handling, codesign temp directory, SQLite backup, UV bindings, environm...
- Improve the sandbox flag behavior and add related tests.