How Firecracker microVMs work under the hood to sandbox untrusted code and AI agents Sylvain Kerkour 29 days ago