Local sandboxing in the GitHub Copilot app

GitHub Copilot app adds local sandboxing, letting users restrict file, network and credential access per project. Settings apply to new sessions and can be toggled via the UI or /sandbox command. The preview defaults off and does not affect cloud sessions. Enterprise policies may further limit access.