First local, same-host, kernel-namespace-only sandbox extension --
every current self-hosted extension requires an SSH hop plus a
container runtime or VM. Also the first extension able to actually
enforce the network.default: deny every profile already declares.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
