Revert "lib: delete reference to lib/sandbox.nix"

This reverts commit 9ee089ae.

0fe7bde3 is not in master yet and it would break
master if it were: https://github.com/NixOS/nixpkgs/pull/31803#pullrequestreview-77638434