Sandbox-runtime fixes Node proxy bypass and Windows fence gaps
- Node's built-in HTTP clients use the sandbox's proxy anthropics/sandbox-runtime
- windows: network fence fix, a fuller fence check, and a loopback switch anthropics/sandbox-runtime
- windows: write-restricted token, kept grants, profile read grant anthropics/sandbox-runtime