feat(sandbox/vm): snapshot restore

[m-hilgendorf]

• Create pre-baked rootfs/snapshot on first sandbox creation with --isolation=vm
• Refactor init to handle being restored from a snapshot
• Move per-sandbox arguments to a config file loaded at snapshot restore
• Create fully fledged sandbox rootfs and chroot instead of rebuilding vms every single time.