#737 Enable network access in sandbox containers after Sysbox deployment

After Sysbox+DinD is deployed on srv2 workers, update sandbox to allow network access. Current: network_mode=none (blocks all). Needed: network_mode=bridge (allows outbound). File: engine/tools/shell_command.py. Long-term: consider egress proxy with domain allowlist for security.