Gru Sandbox: Secure Self-Hosted AI Agent Execution