Introduce mkosi-sandbox and stop using subuids for image builds#2956

DaanDeMeyer merged 2 commits intosystemd:mainsystemd/mkosi:mainfrom

DaanDeMeyer:varDaanDeMeyer/mkosi:varCopy head branch name to clipboard