Merge "Enable genrule sandboxing by default" into main am: 2f07f035 am: 9dfbd5d2 am: 0883b1e5

Original change: https://android-review.googlesource.com/c/platform/build/+/2782270



Change-Id: I20b2b93112c73d69f902189787be2a1d366c1698
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>