How Firecracker microVMs work under the hood to sandbox untrusted code and AI agents Sylvain Kerkour 3 months ago