Method resolve_sandbox_uid

crates/openshell-driver-kubernetes/src/config.rs:347–361

Resolve the sandbox UID/GID pair. Resolution order: 1. Configured `sandbox_uid` / `sandbox_gid` (explicit override) 2. `OpenShift` SCC namespace annotations (`sa.scc.uid-range`, `sa.scc.supplemental-groups`) — passed in as the optional `namespace_annotations` map 3. Fallback defaults: UID=`1000`, GID=UID

(
        &self,
        namespace_annotations: Option<&std::collections::BTreeMap<String, String>>,
    )

    ///    `namespace_annotations` map
    /// 3. Fallback defaults: UID=`1000`, GID=UID
    pub fn resolve_sandbox_uid(
        &self,
        namespace_annotations: Option<&std::collections::BTreeMap<String, String>>,
    ) -> u32 {
        if let Some(uid) = self.sandbox_uid {
            return uid;
        }
        if let Some(anns) = namespace_annotations
            && let Some(range) = anns.get(ANNOTATION_SCC_UID_RANGE)
            && let Some(uid) = Self::from_open_shift_uid_range(range)
        {
            return uid;
        }
        DEFAULT_SANDBOX_UID
    }

    pub fn resolve_sandbox_gid(
        &self,