Sandbox improvements

[MesterMan03]

Problem / motivation

Now that we have basic sandboxing for scripts, it's time to look for ways to harden it. On linux the combination of Landlock, seccomp and prctl already give a very strong security, however macOS and Windows aren't close at all to this level of security.

Proposed solution

Look for alternative ways of sandboxing on these platforms, look into how browsers do it. Challenge: Bun's dev experience must be kept.

Alternatives considered

No response

Scope check

• This feature belongs in the engine, not a mod
• This feature does not add game logic to the engine