fix(sandbox): resolve short sandbox ID prefixes consistently

[xiaojunxiang2023]

Summary

Sandbox IDs are 32-character lowercase hex strings (UUID without dashes). cubecli ls truncates them to 12 characters for display, but several APIs and CLIs previously required the full ID or used naive strings.HasPrefix matching without ambiguity checks.

This PR adds a shared sandbox ID resolver and wires it through CubeMaster, Cubelet, and CLI entry points so that:

• Display can stay short (12-char truncation unchanged; --no-trunc still shows the full ID)
• Input accepts either a full 32-char ID or a unique short prefix
• Ambiguous prefixes return a clear error instead of silently matching the wrong sandbox
• Missing IDs return a not-found error

Core resolver (sandboxid.Resolve)

Case	Behavior
Exact match (case-insensitive hex)	Return canonical full ID
Unique prefix among candidates	Return the matching full ID
Multiple prefix matches	ambiguous sandbox id prefix
No match, input is 32-char hex	Passthrough (downstream validates existence)
No match, input is short prefix	sandbox id not found

Changes by component

CubeMaster

• New pkg/sandboxid/ with table-driven unit tests
• New ResolveSandboxID() in pkg/service/sandbox/:
  • Resolves against localcache.ListKnownSandboxIDs()
  • Falls back to listing sandboxes from healthy Cubelet nodes when cache is cold
• Wired into: SandboxInfo, DestroySandbox, Exec, Update, SetTimeout, Refresh
• HTTP handlers: snapshot create/rollback, template commit, sandbox logs
• cubemastercli list --sandboxid filter uses prefix resolution

Cubelet

• New pkg/sandboxid/ (same logic, separate module)
• pkg/store/cubebox.Store.Get() resolves short/full IDs before indexer lookup
• List filter by id benefits automatically via Get()

cubecli

• destroy and inspect/info (metadata) use resolver instead of raw HasPrefix
• Ambiguous or missing prefixes surface as CLI errors

Out of scope (unchanged)

• cubecli ls default 12-char display truncation
• Container ID prefix resolution (containerd CompleteShortId path unchanged)
• SDK model changes (no new fields; clients pass short or full ID as before)

Motivation

Users often copy the truncated ID from cubecli ls and then fail on cubemastercli sandbox info -s <prefix> or cubecli destroy <prefix>. This aligns behavior with the common expectation: show short, accept short when unique.

Example:

# cubecli ls shows: a1b2c3d4e5f6 ...
cubemastercli sandbox info -s a1b2c3d4e5f6   # works when prefix is unique
cubecli destroy a1b2c3d4e5f6                   # works when prefix is unique
cubecli destroy a1b2                          # error if multiple sandboxes share prefix