Extend sandbox to record byte-level provenance

[tripledoublev]

Modify the sandbox engine and file-writing tools to map every written byte/line range to the specific reasoning turn (Event ID) that produced it.

Relates to #36