feat(agent): sandboxed launches for managed programs (Windows, preview)

Cargo.toml

@@ -31,6 +31,7 @@ bytes = "1"
 clap = { version = "4", features = ["derive"] }
 futures-core = "0.3"
 http-body-util = "0.1"
+humantime = "2"
 humantime-serde = "1"
 hostname = "0.4"
 hyper = { version = "1", features = ["client", "http1", "server"] }

crates/agent/Cargo.toml

@@ -32,6 +32,7 @@ bytes.workspace = true
 clap.workspace = true
 glob = "0.3"
 hostname.workspace = true
+humantime.workspace = true
 hyper.workspace = true
 hyper-rustls.workspace = true
 hyper-util = { workspace = true, features = ["client-legacy", "http1"] }
@@ -88,5 +89,12 @@ windows-sys = { version = "0.61", features = [
 	"Win32_Foundation",
 	"Win32_Security",
 	"Win32_Security_Authorization",
+	"Win32_Storage_FileSystem",
+	"Win32_System_Console",
+	"Win32_System_Diagnostics_ToolHelp",
+	"Win32_System_JobObjects",
+	"Win32_System_Pipes",
 	"Win32_System_Registry",
+	"Win32_System_RemoteDesktop",
+	"Win32_System_Threading",
 ] }