feature: run in sandbox

[mikestaub]

I don't want claude code to have access to files outside the workspace.

maybe we can combine this with something like: https://github.com/Automata-Labs-team/code-sandbox-mcp

[dmikushin]

It's done here https://github.com/democratize-technology/claude-code-container-mcp . The changes are too far-going, but the Docker idea is valid. Perhaps, a subset of this work could be extracted and merged?