in sandboxed run scripts, allow .env to be an in any ancestor directory, same as in findEnvFile; also prep for sanboxing with global command (#147)

packages/cli/src/gemini.ts

@@ -21,6 +21,11 @@ async function main() {
   const config = loadCliConfig();
   let input = config.getQuestion();
 
+  if (process.env.GEMINI_CODE_SANDBOX && !process.env.SANDBOX) {
+    console.log('WARNING: sandboxing is enabled, but still OUTSIDE sandbox');
+    // TODO: get inside sandbox
+  }
+
   // Render UI, passing necessary config values. Check that there is no command line question.
   if (process.stdin.isTTY && input?.length === 0) {
     const readUpResult = await readPackageUp({ cwd: __dirname });