Six vendors now ship near-identical per-agent isolation. The K8s Agent Sandbox CRD turned it into infrastructure. The control ...