Iironclaw52FairSandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.Registryironsecco