Hardens the sandbox for running model-written code: one shared WASM runtime, a buffer-free host ABI, uncatchable timeouts and cancellation, memory and result limits, errors returned in ScriptExecutionResult, and generated TypeScript declarations for the registered APIs.
Breaking: the built-in file system and network APIs are removed along with SandboxConfiguration and its builder methods. IScriptBox is no longer disposable, CreateSession takes an options callback, and ScriptExecutionResult is reshaped. See #16.