What Claude Code Can and Can’t Do with Full Access Inside a Docker Sandbox