Re: --network none is your best friend — here's our full sandbox config + gVisor update

Thanks @custralis for the great feedback on my article about Docker sandboxing! You're 100% right — --network none alone isn't enough. Here's our actual L2 sandbox config that addresses every point yo...