seccomp-util: add new @sandbox syscall group with landlock/seccomp
    
    Let's group these 4 syscalls, as they offer similar things and I guess
    might be used in conjunction quite often, as they offer unprivileged
    sandboxing.
    
    Fixes: #26913