Add sandbox checks

[dspinellis]

Following the introduction of the first sandbox check in b14272c complete the checks for the remaining commands.

[codecov]

Codecov Report

❌ Patch coverage is 94.11765% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 82.86%. Comparing base (b14272c) to head (c001ac1).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
src/sed/compiler.rs	94.11%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #477      +/-   ##
==========================================
+ Coverage   82.67%   82.86%   +0.19%     
==========================================
  Files          13       13              
  Lines        5997     6036      +39     
  Branches      347      351       +4     
==========================================
+ Hits         4958     5002      +44     
+ Misses       1036     1031       -5     
  Partials        3        3              

Flag	Coverage Δ
macos_latest	83.58% <94.11%> (+0.19%)	⬆️
ubuntu_latest	83.67% <94.11%> (+0.19%)	⬆️
windows_latest	0.00% <0.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[codspeed-hq]

Merging this PR will degrade performance by 2.14%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 1 regressed benchmark
✅ 10 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	number_fix	580.5 ms	593.2 ms	-2.14%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dspinellis:sandbox (c001ac1) with main (2a5ab5a)}