How Firecracker microVMs work under the hood to sandbox untrusted code and AI agents Sylvain Kerkour 1 month ago