Save services and ports in `sandbox.capabilities` by capability name.

  - the associated objet can be a service or a port
  - Ports are usable after the sandbox promise resolves.