Partially sandbox preview iframe

We can't fully sandbox playground iframes (since the whole point is that they execute code), but it would probably be good to at least include some sandbox protections. For example, maybe we shouldn't allow downloads, because somebody could share a Playground link that initiates a download of a malicious binary.

https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-sandbox