[sandbox] Sandboxify CallHandlerInfo external pointers

Bug: v8:10391
Change-Id: I7f1b69b1fe41507e4eb72a35b4c143a970cc2f74
Cq-Include-Trybots: luci.v8.try:v8_linux64_heap_sandbox_dbg_ng,v8_linux_arm64_sim_heap_sandbox_dbg_ng
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3788205
Commit-Queue: Samuel Groß <saelo@chromium.org>
Reviewed-by: Igor Sheludko <ishell@chromium.org>
Cr-Commit-Position: refs/heads/main@{#82149}

include/v8-internal.h

@@ -383,8 +383,8 @@ constexpr uint64_t kAllExternalPointerTypeTags[] = {
   V(kEmbedderDataSlotPayloadTag,          unsandboxed, TAG(12)) \
   V(kCodeEntryPointTag,                   unsandboxed, TAG(13)) \
   V(kExternalObjectValueTag,                sandboxed, TAG(14)) \
-  V(kCallHandlerInfoCallbackTag,          unsandboxed, TAG(15)) \
-  V(kCallHandlerInfoJsCallbackTag,        unsandboxed, TAG(16)) \
+  V(kCallHandlerInfoCallbackTag,            sandboxed, TAG(15)) \
+  V(kCallHandlerInfoJsCallbackTag,          sandboxed, TAG(16)) \
   V(kAccessorInfoGetterTag,                 sandboxed, TAG(17)) \
   V(kAccessorInfoJsGetterTag,               sandboxed, TAG(18)) \
   V(kAccessorInfoSetterTag,                 sandboxed, TAG(19)) \