Address two review findings on the sandbox requirements document.
Add a runtime dependencies section. It lists the shell, tar, and the
writable workspace, home, cache, and temporary locations that the
execution and synchronization paths need.
Reword the CLI installation contract. The runtime supports an optional
install-and-reprobe flow when an adapter configures an install command.
The document no longer claims the runtime never installs a missing CLI.
Co-authored-by: Paperclip <noreply@paperclip.ing>
State the sandbox environment as a contract that the sandbox owner must
meet. Document the PATH contract, the CLI detection contract, and the firm
rule. The firm rule states that the Paperclip runtime never modifies the
login profile and never sources nvm on the exec path. Link the new document
from the agent-runtime README.
Co-authored-by: Paperclip <noreply@paperclip.ing>
