Add bubblewrap filesystem isolation for recursive child processes#1

Draft

rawwerks wants to merge 6 commits intoopenprose:mainfrom

rawwerks:bwrap-isolation

Commits on Mar 9, 2026

Add bubblewrap filesystem isolation for child processes

rawwerks
and
claude
committed
Build bubblewrap 0.11.0 from source in Docker image

rawwerks
and
claude
committed
Use --tmp-overlay for Docker compatibility

rawwerks
and
claude
committed
Address review feedback: remove /context/ from prompt, clarify tests

rawwerks
and
claude
committed
Address PR review: remove out-of-scope plugins from Dockerfile, add comments

rawwerks
and
claude
committed
Fix shell syntax error: move comment out of line continuation

rawwerks
and
claude
committed