hs: Mention in the manpage that Sandbox and adding a service with the control port fails

We can't tell the sandbox about a new HiddenServiceDir at runtime so this will always fail until we get a better sandbox system.

For now, we should at least document it in the manpage.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information