feat: sandboxing js contracts

[ppedziwiatr]

Right now we're using VM2, but that obviously works only in node.js env.

Another idea is to run js code in the js engine that is embedded in a wasm module. Example: https://bellard.org/quickjs/

with js bindings - https://github.com/justjake/quickjs-emscripten