Sandbox snapshot

Keeps a snapshot of the default branch after the project's setup commands, so sandbox steps that run them start from it and fetch only their own commit. Hashes the files that decide it, and builds again when that hash, the setup commands or the image change, and before it expires.