I doubt your CI can test Sandstorm, so I'm going to go ahead and skip CI here. :)
This PR updates the base box and vagrant-spk configuration to a more modern standard and fixes a couple issues with the build. HLedger already appears to correctly configure permissions thanks to @zarybnicky. I need to go grab my signing key to get a new package built, but I will endeavor to get a grain setup with some test URLs with different permission levels for testing shortly. (You may wish to wait until I get this part complete before merging, in case we find a bug.)
Note that I used Hacktoberfest as my incentive to handle some long-overdue PRs, so while it's not required, if you want to give me credit, please add a hacktoberfest-accepted label to this PR.