docker: exec in versioned container

sandbox: release the token only when it was acquired (#48)

build: go 1.24

docker: override executable with env variable (#37)

server: health endpoint

fileio: create parent dirs before writing file

cli: exec command

cli: sandbox/add - add from registry

build: sandboxes

config: prefer boxes dir to boxes file