AI sandbox: isolation, code execution, and costs

Guide for selecting and using an isolated environment for AI code execution, covering Firecracker runtime checks, resource limits, and secure key handling.