Agent code execution sandboxing

213 seconds per agent step evicts hybrid RAG from the local CPU

The FAISS-plus-BM25 retrieval in this writeup does address vocabulary mismatch, but the agent loop around it ran at over 213 seconds a step on CPU, and that figure decided the deployment, not the retrieval design.