Docker Sandboxes mixin adding OpenHands Agent Canvas + headless runner (anthropic, openai, dmr)

Self-hosted decision API: Kev 0.8B behind the System One wire protocol. Weights baked, fail-closed.

Claude workload kit for sbx

GitHub Copilot running from a custom image with the CLI and Flexisip dependencies baked in.