Remote compute providers and embedded Microsandbox support

Scripts can now run on remote compute providers. The CLI embeds the Microsandbox provider for sandboxed remote execution, and release packaging now installs the correct Linux dependency and limits the embedded Microsandbox provider to Linux and Apple Silicon macOS, avoiding the broken Intel macOS dependency path.