sandbox

— for the engineer who got SLT to nod.

got SLT approval and shipped the addition of sandbox steps to the workflow runtime. link the approval thread and the merged PR.