Port the v8 sandbox to C++

This is intended to fix the v8 vulnerabilities once and for all,
at the cost of requiring v8 to be installed, and a thing to be built.