feat: sandboxing for macos (#7197)

Co-authored-by: Alex Rosenzweig <arosenzweig@squareup.com>
Co-authored-by: Amp <amp@ampcode.com>

ui/desktop/forge.config.ts

@@ -4,7 +4,7 @@ const { resolve } = require('path');
 
 let cfg = {
   asar: true,
-  extraResource: ['src/bin', 'src/images'],
+  extraResource: ['src/bin', 'src/images', 'src/sandbox'],
   icon: 'src/images/icon',
   // Windows specific configuration
   win32: {