Ivan Yossi authored Jul 26, 2023 and Halla Rempt committed Jul 26, 2023

[Unversal DMG for testing](https://drive.google.com/file/d/1bW4Gt30uWu-iaV06ZfmI4FlalALR5-JI/view?usp=drive_link) To test: This krita.app runs in sandboxed mode as instructed by the embedded entitlements. No special procedure is needed to trigger the behaviour, use it normally. To test fresh sandbox environment: delete all `Krita` (or from terminal, directories named `org.krita`) from `~/Library/Containers`.

This version should allow to work with krita normally on a sanboxed environment.

The code design might need a bit of refactor. Im not happy with the long class name so I probably end up renaming to `KisMacosSandboxHelper` and probably I would end up adding it to another class instead of using a singleton.

There is a lot still missing so I will list it here
- (trivial) Sandbox permissions are all handled by `NSOPenPanel`, as such using non native file chooser should be disabled
- Update informative text for asking directory permissions: As permissions are handled r...