Terser ways to sandbox-allow related filenames

Using the *_array() functions here confused coverity, and was actually
a bit longer than we needed.  Now we just use macros for the repeated
bits, so that we can mention a file and a suffix-appended version in
one line.
Whitespace fixes
Remove the non-implemented versions of the sandbox _array() functions
Use the ARRAY_LENGTH macro more consistently.