Docker Sandbox kit for Prediction Guard. Network-isolated, credential-proxied AI coding agents.