fix(cloud-agent-next): update sandbox runtime

[eshurakov]

Summary

• add libatomic1 to the production sandbox image for pnpm 11.1.2
• update Cloud Agent Sandbox SDK and all sandbox image tags to 0.12.9
• update the shared Wrangler catalog to 4.127.1; @cloudflare/containers remains at compatible 0.3.7

Verification

• pnpm install --frozen-lockfile
• pnpm --filter cloud-agent-next test -- src/kilo/devcontainer.test.ts
• pnpm --filter cloud-agent-next typecheck
• built the production sandbox image and ran @pnpm/exe@11.1.2

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (3 files)

• services/cloud-agent-next/Dockerfile
• services/cloud-agent-next/Dockerfile.dind
• services/cloud-agent-next/scripts/vercel-snapshot.ts

Previous Review Summary (commit dc1d035)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit dc1d035)

Status: No Issues Found | Recommendation: Merge

Files Reviewed (7 files)

• pnpm-lock.yaml
• pnpm-workspace.yaml
• services/cloud-agent-next/Dockerfile
• services/cloud-agent-next/Dockerfile.dev
• services/cloud-agent-next/Dockerfile.dind
• services/cloud-agent-next/package.json
• services/cloud-agent-next/src/container-usage.ts

---

_{Reviewed by grok-4.6 · Input: 89.9K · Output: 8.5K · Cached: 151K}

_{Review guidance: REVIEW.md from base branch main}