brokk-acp-sandbox

Pure-parsing logic for brokk-anvil that runs either natively (linked as a library) or inside a wasmtime-hosted WASI sandbox (built as the `brokk-acp-sandbox` binary). The wasm path gives memory/crash/CPU isolation around untrusted YAML, zip, and regex inputs without losing the ability to fall back to native for performance.