Function with_sandbox

crates/openshell-server/src/grpc/policy.rs:3938–3949

(mut request: Request<T>, sandbox_id: &str)

    /// Use for tests that exercise sandbox-caller code paths.
    #[allow(dead_code)]
    fn with_sandbox<T>(mut request: Request<T>, sandbox_id: &str) -> Request<T> {
        request
            .extensions_mut()
            .insert(Principal::Sandbox(SandboxPrincipal {
                sandbox_id: sandbox_id.to_string(),
                source: SandboxIdentitySource::BootstrapJwt {
                    issuer: "openshell-gateway:test".to_string(),
                },
                trust_domain: Some("openshell".to_string()),
            }));
        request
    }

    #[test]
    fn security_notes_use_canonical_internal_ip_classifier() {