lakebox: add start command, fail-fast on unknown sandbox in ssh

[akshaysingla-db]

Two small additions surfaced during end-to-end testing of #5292.

1. databricks lakebox start <id> — wraps the existing StartSandbox RPC. Symmetric to stop. Useful for pre-warming a sandbox before connecting (the gateway also auto-starts on ssh, so this is mostly for scripting).

2. databricks lakebox ssh <unknown-id> now fails with no lakebox named "..." — databricks lakebox list shows available IDs instead of falling through to ssh and surfacing the generic Permission denied (publickey) from the gateway. Implemented by making the existing pre-ssh api.get (added in lakebox: read SSH gateway host from Sandbox response, cache per profile #5292 for gateway discovery) treat apierr.ErrNotFound as fatal. Non-NotFound errors still fall through so transient API hiccups don't block a connection the gateway can still route.

Co-authored-by: Isaac

Changes

Why

Tests

[github-actions]

Waiting for approval

Based on git history, these people are best suited to review:

• @pietern -- recent work in cmd/lakebox/
• @shuochen0311 -- recent work in cmd/lakebox/

Eligible reviewers: @andrewnester, @anton-107, @denik, @renaudhartert-db, @shreyas-goenka, @simonfaltum

_{Suggestions based on git history. See OWNERS for ownership rules.}