llama.cpp server webui runs tool commands in rootless sandboxed containers

llama-server build 10423 adds an option letting the web UI run tool commands inside rootless sandboxed containers. The user found it while red-teaming LLMs' attempts to escape sandbox VMs, containers, namespaces, and jails.