PRI-1781 resolved by projected container personas: shell, box-shell, and
browser-driver no longer run the child Lace agent inside a container-mounted
lace-data directory, so subagent session writes stay on the host and avoid the
prior lace-data permission mismatch.
