v0.1.1

• Friendlier error message for when bubblewrap is not installed
• Support Python 3.12
• Add uv to default rootfs
• Add ripgrep to default rootfs
• Use work_dir directly instead of as a session dir root
• When specifying a work_dir instead of using a temporary one, files persist across runs
• Add support for gzip compression levels for rootfs generation
• Add writable /tmp dir
• Add writable versions of basic devices like /dev/null
• Code now runs as "sandbox" user instead of the host's current user