#251 [PHASE 3] DSL Converter Security Hardening

Phase 3: DSL converter security improvements: 1. Replace blacklist with whitelist approach 2. Add sandbox execution (subprocess with seccomp/AppArmor) 3. Implement proper AST validation 4. Add resource limits (CPU, memory, time) 5. Consider Docker isolation for code execution