Jail everything

[notramo]

I want to jail every operation inside the repo. Nothing needs to read other parts of the filesystem.
aube run dev inside a SvelteKit repo should be also jailed.

Network access should be allowable somehow.

[jdx]

we could maybe support this, but this is doable today with mise run