One Shared VM Makes Mac Containers Boring Again

[repo, tool, infrastructure, macos, containers, docker, kubernetes, local-dev, agent-sandboxes] Possible Mac-native substrate for joelclaw agent sandboxes: Docker-compatible today, k3s/local HTTPS/machines tomorrow, without swapping the whole rig yet.