Add setmetatable/getmetatable/rawget/rawset/rawequal/rawlen to the per-script
sandbox allow-list so scripts can define classes the idiomatic Lua way. These are
pure language features with no engine/IO reach, so they are capability-free like
std; pcall stays withheld. Adds a metatable-OOP enforcement test and bumps the
package to 0.2.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>