Reject a backend route that violates host storage boundaries.
The sandbox check is deliberately shallow. Wrapping a filesystem backend
in another BackendProtocol implementation changes who owns that safety
contract, so dcode does not inspect arbitrary backend object graphs.
Backend route registration to validate.
Internal route prefixes unavailable to extensions.
Whether the default execution backend is sandboxed.
