The Extension Airlock: Architecting Egress-Restricted DevContainers to Neutralize Malicious AI Plugins