fix: cast unknown to avoid TS2769 in sandbox approval UI

feat: require sandbox_create approval before sandbox operations

feat: merge HF Space improvements

frontend update

Improve job approval UX with tabs, job URL, and message ordering

making docker run build work

improved tool calling, push to hub, etc.

logs have a button to see, improved rejection/approved flow, trying to handle tqdm

improved design

added code panel, tool approval, tool calls logging

Add web frontend infrastructure for HF Agent