BEAM-safe expression sandbox for Program-of-Thought style code.

This is not an arbitrary Elixir evaluator. It accepts a small expression language over literals and variables, and rejects arbitrary calls, aliases, atoms, and remote execution.