Adds:
- Infrastructure-only sandboxes with no built-in PDS.
- Automatic subnet selection, wildcard routes, and TXT records.
- Public connection info through access --json.
- Generated ES256 application keys.
- A managed lexicon authority for private testing.
Adds: