go/runtime/host/sandbox: Add deadline to bwrap pipes

[kostko]

Fixes #4102

[codecov]

Codecov Report

Merging #4111 (1c5963f) into master (ebd5673) will decrease coverage by 0.55%.
The diff coverage is 12.50%.

@@            Coverage Diff             @@
##           master    #4111      +/-   ##
==========================================
- Coverage   66.87%   66.32%   -0.56%     
==========================================
  Files         410      410              
  Lines       42391    42398       +7     
==========================================
- Hits        28350    28119     -231     
- Misses      10036    10282     +246     
+ Partials     4005     3997       -8     

Impacted Files	Coverage Δ
go/worker/compute/executor/committee/node.go	64.87% <0.00%> (-1.09%)	⬇️
go/runtime/host/sandbox/process/bwrap.go	63.82% <20.00%> (-2.47%)	⬇️
...nsensus/tendermint/apps/keymanager/transactions.go	0.00% <0.00%> (-52.95%)	⬇️
go/ias/http/http.go	18.51% <0.00%> (-44.45%)	⬇️
go/oasis-node/cmd/common/metrics/disk.go	65.38% <0.00%> (-19.24%)	⬇️
go/keymanager/api/policy_sgx.go	23.07% <0.00%> (-15.39%)	⬇️
go/runtime/host/sandbox/sandbox.go	69.76% <0.00%> (-11.25%)	⬇️
go/oasis-node/cmd/common/metrics/resource.go	78.94% <0.00%> (-10.53%)	⬇️
go/oasis-node/cmd/ias/auth.go	64.00% <0.00%> (-8.00%)	⬇️
...consensus/tendermint/apps/keymanager/keymanager.go	57.22% <0.00%> (-6.63%)	⬇️
... and 33 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ebd5673...1c5963f. Read the comment docs.