* fix(runtime): retry transient sandbox startup failures * fix(runtime): fail closed when sandbox teardown fails