examples(coding-agent): bump sandbox runtime

[goncalossilva]

Bumps sandbox example extension to @anthropic-ai/sandbox-runtime@^0.0.37 and updates config merging to preserve all SandboxRuntimeConfig fields.

Newer versions add optional fields (e.g., network.mitmProxy and enableWeakerNetworkIsolation). The extension currently allows only a subset of fields, so other options were dropped.

[github-actions]

Hi @goncalossilva, thanks for your interest in contributing!

We ask new contributors to open an issue first before submitting a PR. This helps us discuss the approach and avoid wasted effort.

Next steps:

1. Open an issue describing what you want to change and why (keep it concise, write in your human voice, AI slop will be closed)
2. Once a maintainer approves with lgtm, you'll be added to the approved contributors list
3. Then you can submit your PR

This PR will be closed automatically. See https://github.com/badlogic/pi-mono/blob/main/CONTRIBUTING.md for more details.

[Copilot]

Pull request overview

This PR bumps the @anthropic-ai/sandbox-runtime dependency from version 0.0.26 to 0.0.37 in the sandbox example extension. The update refactors configuration handling to be more maintainable and forward-compatible with newer runtime versions.

Changes:

• Upgraded @anthropic-ai/sandbox-runtime from ^0.0.26 to ^0.0.37
• Simplified the deepMerge function to use spread operators instead of explicit field assignments
• Refactored SandboxManager.initialize() call to pass the full runtime config via destructuring

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
package.json	Bumped sandbox-runtime dependency to ^0.0.37
package-lock.json	Updated lock file with new sandbox-runtime version and transitive dependency lodash-es to 4.17.23
index.ts	Refactored config merging and initialization to be more maintainable and forward-compatible with new runtime config fields

Files not reviewed (1)

• packages/coding-agent/examples/extensions/sandbox/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[goncalossilva]

Fair! It was a better idea all along, as I don't fully understand why some existing fields were excluded originally, and that may inform the approach here. I'll be back if/once OSS vacation is off. 😄