sandboxFlags is never defined in "create navigation params by fetching"

[jeremyroman]

It is used only in this step:

If sandboxFlags is not empty and responseCOOP's value is not "unsafe-none", then set response to an appropriate network error and break.

Looking at how it was previously used, I suspect this should be targetSnapshotParams's sandboxing flags.