Enable sandboxes to connect to existing Docker or k8s instances

[jjallaire]

This is not dissimilar in spirit to the SSH provider where a sandbox is provisioned and configured "somehow" and then we connect to it.

Note that while this provides some conveniences, we should approach with caution as sandboxes run this way are not reproducible from source code (as some out of band process created and configured them).