Mount extra paths in sandbox to fix Haskell ghc

- /var/lib mounted read-only
- /box/tmp directory created by isolate.rb
- /tmp mounts /box/tmp read-only noexec