disallow .ls diagnostics in sandboxed mode

use # as the lazy formal argument marker, so $ can be spreadsheet cel…

…l reference

fix broken if/else repl handling

better error on negative slice bound

allow variables in slicing bounds

restore repl .ls

label_infix with label not right before for

general for loop