Testcontainers

Inside its sandbox, a coding agent hit "Could not find a working container runtime strategy" and "listen EPERM: operation not permitted 0.0.0.0:8080", filed every failure under "environment" and committed. On the host, three tests failed, and the skipped `next build` stayed broken for two months.