chore(env): generate sandbox test password

.env.test

@@ -4,6 +4,7 @@ TRAP_CCLIBS_TEST_TIMEOUT_SECONDS=3
 # Dedicated `just test-timeout` fixture timings.
 TRAP_CCLIBS_TEST_TIMEOUT_WATCHDOG_SECONDS=1
 
-# Test placeholder. The real value is generated in `.env` on first `just install`,
+# Test placeholders. The real values are generated in `.env` on first `just install`,
 # or after `just clean` / `just reinstall`.
 OPENCODE_SERVER_PASSWORD=redacted
+SANDBOX_PASSWORD=redacted

just/install.just

@@ -32,8 +32,8 @@ generate-env:
     password="$(openssl rand -hex 32)"
     while IFS= read -r line || [ -n "$line" ]; do
         case "$line" in
-            OPENCODE_SERVER_PASSWORD=*)
-                printf '%s\n' "OPENCODE_SERVER_PASSWORD=$password"
+            OPENCODE_SERVER_PASSWORD=*|SANDBOX_PASSWORD=*)
+                printf '%s\n' "${line%%=*}=$password"
                 ;;
             *)
                 printf '%s\n' "$line"