Make libz_h2 work with -mabi=sandbox.
Add inflate sandboxing back to libz_h2/zwrapper.c and don't do cheri_ptrperm inside the sandbox ABI because it's undefined (this was breaking libpng).