Handle untrusted code with a real sandbox

[iErcann]

Try quickjs + wasm (keep it TS)

If one day there is client side code, run the game inside an iframe