refactor(auth): decouple sandbox node from core deployment and add dedicated provisioning script