blog/docker-sandbox-coding-agents-isolation/index.html