Export sandbox label

`sandboxLabel = "agents.x-k8s.io/sandbox-name-hash"` is defined in both controllers and extensions/controllers. This label isn't being exported. Since this label represents a contract between the two controllers, defining it in two places risks consistency drift. Let's consider reusing it by either moving it to the `sandbox_types.go` or just make it so that we can export it from the controller. 