build - set no-sandbox everywhere

[bpasero]

No description provided.

[bpasero]

The intent is to always have --no-sandbox as argument on Linux to prevent issues such as #81056

@joaomoreno @Tyriar please let me know if you can think of yet another place where we need to set this. I feel we have the following entry points:

• from the command line ("code"): should be handled via the change in cli.ts
• from the window manager: hopefully covered by the changes to the .desktop files
• from invoking the executable directly: as far as I can tell we cannot do anything about that usage

NOTE: issue does not appear when running Electron as node!

[joaomoreno]

Awesome.