Sandboxed, deterministic WASM compilation of proc macros for Rust