Separate sandbox

[numberZero]

The code uses my libluabox currently, but the dependency will be optional.

At the moment, it supports ports and memory. Event info is not passed, interrupts are not supported yet.

Some code is borrowed from the Minetest itself as functions can’t be loaded into the sandbox.

Fix #387 Related: #283