[Feature Request] Make option for "all passthrough" (i.e. disable import isolation part of sandbox)

[cretz]

Describe the solution you'd like

Today we allow you to specify a certain set of passthrough modules when configuring the sandbox runner, but it only works if you know the module name (but it is hierarchical). Some users may want to pass through everything regardless of root module, so we should probably add a SandboxRestrictions field for passthrough_all_modules: bool.

[josh-berry]

This is helpful because it still allows the sandbox to provide state isolation for each workflow, but without requiring users to worry about allow-listing individual modules as being deterministic.