feat(sandbox): extend managed allowlist with build + dataset egress domains

Widens the Bash-subprocess egress allowlist for common agent workflows:
Anthropic direct (api, statsig), Ubuntu mirrors, NodeSource/deb for Node,
crates.io (Rust), yarn, full npm + pypi groups, GitHub release assets,
and wildcards for geoboundaries, googleapis, jsdelivr — covers dataset
fetches and CDN-backed library assets that previously failed silently.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

sandbox/managed-settings.json

@@ -7,15 +7,33 @@
     "enableWeakerNestedSandbox": true,
     "network": {
       "allowedDomains": [
-        "pypi.org",
-        "files.pythonhosted.org",
-        "registry.npmjs.org",
+        "anthropic-proxy",
+        "api.anthropic.com",
+        "statsig.anthropic.com",
         "github.com",
         "api.github.com",
-        "raw.githubusercontent.com",
-        "objects.githubusercontent.com",
         "codeload.github.com",
-        "anthropic-proxy"
+        "objects.githubusercontent.com",
+        "raw.githubusercontent.com",
+        "release-assets.githubusercontent.com",
+        "registry.npmjs.org",
+        "npmjs.com",
+        "npmjs.org",
+        "yarnpkg.com",
+        "registry.yarnpkg.com",
+        "pypi.org",
+        "pythonhosted.org",
+        "files.pythonhosted.org",
+        "crates.io",
+        "index.crates.io",
+        "static.crates.io",
+        "deb.nodesource.com",
+        "archive.ubuntu.com",
+        "security.ubuntu.com",
+        "*.geoboundaries.org",
+        "www.geoboundaries.org",
+        "*.googleapis.com",
+        "*.jsdelivr.net"
       ]
     }
   },