Docker Sandboxes kit: give an agent governed access to a local reShapr MCP server, key kept on host

Docker Sandboxes kit for the built-in Devin agent: model pin and durable Devin settings.

A virtual desktop and noVNC access for the browser installed by the Playwright sbx kit.

ARM64 sbx v3 frontend tools with five harness adapters and MCP connections.