Make the bwrap alias a wrapper around the sandboxexec Go bindings.

bwrap previously built its own specs.Spec, wrote an OCI bundle and drove
runsc/container directly. It now only parses the bubblewrap command line
and translates it into sandbox.Options; //sandboxexec/sandbox owns the
bundle, the runsc invocation and the container lifecycle.

Author: milantracy

runsc/cmd/alias/bwrap/BUILD

@@ -18,9 +18,9 @@ go_library(
         "//pkg/log",
         "//runsc/cmd/util",
         "//runsc/config",
-        "//runsc/container",
         "//runsc/flag",
         "//runsc/specutils",
+        "//sandboxexec/sandbox",
         "@com_github_google_subcommands//:go_default_library",
         "@com_github_opencontainers_runtime_spec//specs-go:go_default_library",
         "@org_golang_x_sys//unix:go_default_library",
@@ -32,6 +32,8 @@ go_test(
     srcs = ["bwrap_test.go"],
     library = ":bwrap",
     deps = [
+        "//runsc/config",
+        "//sandboxexec/sandbox",
         "@com_github_google_go_cmp//cmp:go_default_library",
         "@com_github_google_go_cmp//cmp/cmpopts:go_default_library",
         "@com_github_opencontainers_runtime_spec//specs-go:go_default_library",