agent sandboxing release

GitHub Copilot local sandboxing GA

GitHub made local sandboxing generally available across Copilot CLI, Copilot app and VS Code Agent Host, with policy controls for filesystem, network, credentials and local tools.