Sandboxing Claude CLI with Tart on Apple Silicon

My take on sandboxing Claude CLI and other harnesses on Apple devices without headaches