Removed the named sandbox concept. One config file: sandbox.yaml (installed to ~/.config/ollie/sandbox.yaml). Removed sandbox-remote.yaml, moved restricted.yaml to doc/ as a sample. Removed the 'sandbox' arg from tool dispatch.