Support authentication in lock rule in sandbox

[aignas]

Consider this feature.

There is prior art to passing around credentials in https://github.com/astral-sh/uv/issues/1520

Example from a Slack thread

Write auth information to a file, say /tmp/auth Set --sandbox_add_mount_pair=/tmp/auth:/tmp/auth