Recognize environment variable setting sandbox (implements #38).

Given the suggested wrapper scripts, I am not certain if this is still wanted. Still, for your consideration.

I adopted the suggested name `CABAL_SANDBOX`; the rarity of 'cabal' in the software world makes me optimistic about name conflicts.