feat: improve Landlock sandbox fidelity and test coverage
Added missing Landlock permissions: TRUNCATE, REFER, IOCTL_DEV to better support realistic workloads
Updated test suite with deep coverage: read/write/exec, dir traversal, pipes, redirection, TCP connect, and edge cases
Added nested dir structures and test scripts for verifying sandbox edge behavior
Bumped version to 0.1.10
Improved README with a sharper pitch for landrun and its Landlock v5 capabilities