[AoB] Harden sandbox service

[vgrozdanic]

Service accepts only inbound traffic, all outbound traffic is blocked.

• [ ] Test out network policy on kubernetes for disallowing egress traffc
• [ ] Apply it to our cluster

[vgrozdanic]

Contacted northflank support for this, since it seems that it is not supported currently