A global toolchain manager for AI coding agent sandboxes — one shared, deduplicated Nix store instead of per-project image builds.