Clean up leaked temp dir in validation test

Remove reference to sandbox-only login state from error message in host authentication check

Support Keychain-backed Claude auth in claudebox

Require host Claude login before launching claudebox

Tighten readonly mounts and skip project builds in dry runs

Refresh README to match current claudebox behavior

Harden canonical path validation and document symlink policy

Fix readonly sandbox runtime and harden container isolation tests

Remove TODO.md file containing security tasks related to mount and startup hardening

Block unsafe working directory mounts

Harden sandbox startup and block unsafe parent mounts

Consolidate repo script helpers and remove duplicate style library

Add security TODOs for mount and startup hardening

Refresh sandbox auth state from host Claude session

Remove dependabot and pre-commit gitleaks config — handled by org-level GitHub settings