`sand` subcommand to hard-delete soft-deleted sandboxes

[banksean]

• sand expunge with optional -f --force flag
• hard-deletes specific sandboxes if given a sandbox ID or list of IDs as positional parameters (not sandbox names, since those may have been re-used any number of times)
• hard deletes all the soft-deleted sandboxes if invoked without positional parameters