gio: Create a sandbox checking function

This change is motivated by !3020 (merged) - we want a clear way to detect if the current process is running inside a flatpak or snap sandbox.