Under the hood
Sandboxed shell commands can have extra git config injected, populated only when sandboxing is active.
Sandboxed shell command execution now threads an extraGitConfig array into the exec command builder. It is only populated when sandboxing is active, and empty otherwise.