add baits to sandbox container

[jossef]

Suggesting adding baits to lure attackers into interacting such as

• ssh keys
• environment variables with interesting tokens
• browser database files
• discord
• aws credentials and config
• .npmrc

In addition to monitoring the interaction with such files, with the visibility #585 can give, observing such sensitive content being exfiltrated to a C2 server, we can add a label in the report such as "EXFILTRATING_SENSITIVE_INFORMATION"

[maxfisher-g]

Awesome suggestion @jossef! This is a really good idea.