Rename sandbox_internal.h to cheri_invoke.h, which will now be a public
header from libcheri.