Secure cloud sandboxes for AI agents to run code