Give every agent in Herdr its own Vercel Sandbox

Run terminal-based agents in isolated Vercel Sandboxes from Herdr, with local orchestration, reviewed file uploads, conflict-checked patches, and human-confirmed deletion.