Add sandbox unsandboxed auto-approval setting (#315410)

* Add sandbox unsandboxed auto-approval setting

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Update sandbox policy data

* Reject disabled unsandboxed terminal requests

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>