Add allow-modals permission to sidebar plugins

Problem
Sidebar plugins cannot display modal confirmations (like `window.confirm()`) because the iframe sandbox doesn't include the 'allow-modals' permission, preventing confirmation dialogs from working.

Request
Add the 'allow-modals' permission to the sidebar plugin iframe sandbox so plugins can display confirmation dialogs and other modal interactions.