wrapper-manager/sandboxing: init skeleton module

modules/wrapper-manager/default.nix

@@ -2,5 +2,6 @@
   imports = [
     ./programs/blender.nix
     ./programs/zellij.nix
+    ./sandboxing
   ];
 }

modules/wrapper-manager/sandboxing/default.nix

@@ -0,0 +1,24 @@
+{ lib, ... }:
+
+{
+
+  options.wrappers =
+    let
+      sandboxingType = { name, lib, config, ... }: {
+        options.sandboxing = {
+          variant = lib.mkOption {
+            type = with lib.types; nullOr (enum []);
+            description = ''
+              The sandboxing framework to be applied to the wrapper. A value of
+              `null` will essentially disable it.
+            '';
+            default = null;
+            example = "bubblewrap";
+          };
+        };
+      };
+    in
+    lib.mkOption {
+      type = with lib.types; attrsOf (submodule sandboxingType);
+    };
+}