Runtime Network Controls

This release improves sandbox control with runtime network settings for running sandboxes. The API can now update outbound access without a restart, letting teams block traffic, restore access, or apply a CIDR allow list while SDK clients stay in sync.

It also improves platform reliability for larger workloads. Declarative build sandboxes are capped per runner to avoid hotspots, Python SDK users can opt into WebSocket handshake throttling for bursty PTY and log sessions, and API cleanup jobs now use locks to prevent duplicate work.

Docs add Java SDK references and cleaner snippets, fix locale routing and guide hover states, while security chores expand CODEOWNERS coverage and harden yarn registry checks.