applaunchd: update and install agl-app@ template and sandboxing configs