fix(security): backport generated-code boundary hardening (#14709)

* fix(security): close generated-code sandbox bypasses

* fix(security): address generated-code review gaps

* fix(security): validate builtins getattr aliases