Alibaba Open-Sources OpenSandbox: A gVisor/Firecracker-Based Execution Environment for AI Agent Security