Reapply "[llvm][clang] Enable IO sandbox for assert builds" (#184545) (#22779)
This PR adds tentative `llvm::sys::sandbox::scopedDisable`s to
intel/llvm code to re-enable IO sandbox:
https://discourse.llvm.org/t/rfc-file-system-sandboxing-in-clang-llvm/88791
Although upstream llvm components had `scopedDisable`'s added to
necessary places, intel/llvm is still missing these `scopedDisable`s.
---------
Co-authored-by: Jan Svoboda <jan_svoboda@apple.com>