Update grist

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

manifests/grist/grist.yaml

@@ -72,7 +72,7 @@ spec:
       serviceAccountName: grist
       containers:
         - name: grist
-          image: gristlabs/grist-oss:1.1.18
+          image: gristlabs/grist-oss:1.3.0
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
@@ -103,6 +103,12 @@ spec:
               value: "false"
             - name: GRIST_FORCE_LOGIN
               value: "true"
+            - name: GRIST_SANDBOX_FLAVOR
+              value: gvisor
+          securityContext:
+            capabilities:
+              add:
+              - SYS_PTRACE
           envFrom:
           - secretRef:
               name: grist