Sandboxing

You should only need to sandbox the evaluation environment. The bash tool runs in the attached nREPL environment so that you only need to sandbox your project and not the mcp server as well.

• Running nrepl in a container