charm-tools: sandbox build to hide python libs

See #23378.