Isolated Docker sandboxes for MCP servers. Read-only root, zero capabilities, network-none by default.
