Sandboxing for agentic coding facility