#439 P1: Enforce HIGHWAY_SANDBOX_SECRET in Production

Issue #5 from review: Ephemeral keys break distributed deployments. Location: engine/sandbox/execution_token.py. Fix: Raise error in production mode if secret not configured. Effort: 1 hour.