sandbox allowed domains

[kcoopermiller]

Note

Medium Risk
Changes sandbox network egress configuration and API request shape; misconfiguration could block or unexpectedly allow outbound traffic for restricted sandboxes.

Overview
Adds egress domain allowlists for restricted (non-VM) sandboxes: allowed_domains on the SDK Sandbox and CreateSandboxRequest models (API alias allowedDomains), plus validation that the list is only used when network_access is false and vm is false.

The Prime CLI gains repeatable --allowed-domain on sandbox create (wildcards documented), mirrors the same rules before submit, passes the list into create requests, and shows Allowed Domains on create confirmation and sandbox get when non-empty.

^{Reviewed by Cursor Bugbot for commit 7e3141f. Bugbot is set up for automated code reviews on this repo. Configure here.}