Implement 'sandbox add-source --snapshot'.

Unlike 'cabal-dev', we don't create a tarball, but simply copy the files to a
private location.

Fixes #1143.