sandbox: move initializers to main(),

explicit PLIBS_OBJS static targets, esp. for SANDBOX

TODO: the initializers decl and call should be generated
into config.h
test/runtests.sh: skip SANDBOX tests
gc: stability, skip ptr->vt < PN_TNIL and > P->vts->len