fix(security): harden generated-code boundaries (#14708)

* fix(security): close generated-code sandbox bypasses

* fix(security): address generated-code review gaps

* fix(security): validate builtins getattr aliases