Docker returns to its coding-agent series with an argument shaped like a CI problem: no layer between the agent and the host