Implement provider-agnostic runtime sandboxes for Logic Functions and Code Interpreter

[remihuigen]

Support pluggable sandboxed runtimes for Logic Functions and Code Interpreter: AWS Lambda should be one option, alongside other external providers and a secure self-hosted local runtime.

The local option should execute untrusted code in isolated sandboxes within the operator’s own deployment, rather than directly in the Twenty server process. This gives self-hosted users a production-safe path without requiring a third-party provider, while retaining the flexibility to use Lambda or other runtimes where preferred.

This strengthens Twenty’s self-hosting direction and lets operators choose the right balance of infrastructure ownership, security, compliance, and operational simplicity.