Google Described Its Agent Sandbox. I Built One with Firecracker and Measured It