BunkerVM – Run AI agents in isolated Firecracker microVM sandboxes (github.com)