Add a feature flag telling the back end to use the sandbox ABI.
When we’re using the sandbox ABI, do the capability stack thing, but don’t run the crazy-ugly hackish pass, run a simpler one that rewrites capability allocas as ‘normal’ ones so that the back end and inserts the intrinsics to derive them from C11 and set their length correctly.