fix: allow root bypass in sandbox

[erfur]

Summary

• mark root Claude child processes as sandboxed when dangerous permission bypass is explicitly enabled
• preserve existing behavior for non-root processes and other permission modes
• add smoke coverage for the child environment

Testing

• npm test
• npm run build