ci(runner): validate sealed CommonJS loader

.github/workflows/runner-full-stack-e2e.yml

@@ -380,9 +380,12 @@ jobs:
               "command": "initialize",
               "params": {"agent": "codex", "model": "gpt-5.6-sol"},
           }
+          loader = r'''const fs=require("node:fs");const Module=require("node:module");const filename=process.argv[1];const source=fs.readFileSync(filename,"utf8").replace(/^#![^\r\n]*(?:\r?\n|$)/,"");const artifact=new Module(filename);artifact.filename=filename;artifact.paths=[];artifact._compile(source,filename);'''
           result = subprocess.run(
               [
                   f"/proc/self/fd/{node_descriptor}",
+                  "--eval",
+                  loader,
                   f"/proc/self/fd/{sidecar_descriptor}",
               ],
               input=json.dumps(request) + "\n",