feat(sandbox): 不可信字节在沙箱子进程里解析(撤销权限、超时与内存强杀);种子、文件预览、字幕解析迁入

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/vitest.config.ts

@@ -24,6 +24,8 @@ const UNIT = [
 ];
 
 const SERIAL = [
+  // 起真实沙箱子进程(内存 / 超时强杀)
+  "test/sandbox/**",
   "test/e2e/**/*.test.ts",
   "test/auth-settings/admin-api.test.ts",
   "test/auth-settings/engine-retry.test.ts",