https://howtonotcode.com/story/864-cli-coding-agents-rise-with-docker-isolation-to-tame-risk