How does CubeSandbox configure an isolation environment for AI Agent: concurrent execution, permissions and cost trade-offs