Docker Sandboxes Fixed the Scariest Thing About Claude Code