Tighten regex on Simplifier/strip_v2_chroot_path (#21241)

The regex that cleans up stdout was a bit aggressive looking for pants-sandbox absolute URLs. The motivating example was `pytest` debug stdout accidentally removing `extra_env_vars` which included URLs.

This PR tightens that to well-known alphanumeric, hyphens, underscores, and forward slashes before `pants-sandbox` instead.

src/python/pants/util/strutil.py

@@ -139,7 +139,7 @@ def strip_v2_chroot_path(v: bytes | str) -> str:
     """
     if isinstance(v, bytes):
         v = v.decode()
-    return re.sub(r"/.*/pants-sandbox-[a-zA-Z0-9]+/", "", v)
+    return re.sub(r"/[a-zA-Z0-9-_\/]*/pants-sandbox-[a-zA-Z0-9]+/", "", v)
 
 
 @dataclasses.dataclass(frozen=True)

src/python/pants/util/strutil_test.py

@@ -114,6 +114,18 @@ def test_strip_chroot_path() -> None:
     assert strip_v2_chroot_path("") == ""
     assert strip_v2_chroot_path("hello world") == "hello world"
 
+    # Confirm other data (e.g. URLS) is unaffected
+    assert (
+        strip_v2_chroot_path("https://pantsbuild.org and /private/tmp/pants-sandbox-uPH7bl/sandbox")
+        == "https://pantsbuild.org and sandbox"
+    )
+    assert (
+        strip_v2_chroot_path(
+            "{'URL': 'https://pantsbuild.org', 'VENV': '/tmp/q_dt/pants-sandbox-K3/.cache/pex'}"
+        )
+        == "{'URL': 'https://pantsbuild.org', 'VENV': '.cache/pex'}"
+    )
+
 
 @pytest.mark.parametrize(
     ("strip_chroot_path", "strip_formatting", "expected"),