Why AI Agents Require Ephemeral Sandboxes