Sandbox gains rules for git configuration in nested repositories and for symlinks

The sandbox is a set of limits on which files and resources commands run by Claude can reach. When Claude Code builds the sandbox's rules, it now adds two things:

• A rule that blocks access to the lock file git uses while it changes the configuration of a repository nested inside another one.
• A profile used to grant access to symlinks, files that point to other files.