Box: run AI agents in a sandbox with OS isolation, default-deny policies, and credential injection; Rust-based, supports macOS on Apple silicon

Original headline: "strands-agents/box: Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, wi"