Run agents in `local`, `docker`, or `ssh` sandboxes
Route every tool call through options.sandbox.backend in bmo.toml to execute on the host, in a container, or on a remote machine — without changing your prompt. Verify with bmo run --sandbox docker "echo hi".
