`cursor-sandbox` binary missing setuid bit breaks extensions

Hey @Aaron_Smith

Thanks for the investigation over here:

I’ve flagged this for the team!