Docker Sandboxes mixin adding OpenHands Agent Canvas + headless runner (anthropic, openai, dmr)

Self-hosted decision API: Kev 0.8B behind the System One wire protocol. Weights baked, fail-closed.

Claude workload kit for sbx

Hermes Agent as a marsh command

WordPress sandbox image for Docker Sandboxes: PHP 8.5, MariaDB, Apache, wp-cli, Chromium