docs: add sandbox design rationale (Docker vs microVMs)#1025

Mossaka merged 3 commits intomaingithub/gh-aw-firewall:mainfrom

docs/sandbox-designgithub/gh-aw-firewall:docs/sandbox-designCopy head branch name to clipboard