Is your feature request related to a problem? Please describe

As have been discussed on the different threads, GraalVM has sandboxing capabilities but the support of the Java language (Espresso) has been quite limited.

Describe the solution you'd like

Use GraalVM capability to spin off a separate JVM to host the sandboxed component. With this model, it becomes possible to:

• run OpenSearch core on any JVM that GraalVM supports (without SM)
• use older JDK versions (up to 23) with SM enabled for non-trusted components

The most difficult issue with such a model is communication between host and spawned JVM/context: it seems not being possible to wire up the services from the host JVM.

Related component

Other

Describe alternatives you've considered

N/A

Additional context

See please #1687