Extract sandbox module into its own library

See branch sandbox_refactor , with PR at https://github.com/torproject/tor/pull/188

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information