See: https://blog.geekfarm.org/sandboxing-claude-building-a-reproducible-claude-code-environment-with-tart-and-packer.html