aa3f4b7b90
The previous `docker run -d --entrypoint="" ... sleep 60` bypassed the entrypoint chain entirely, so entrypoint-user.sh never ran, so pi-toolkit/install.sh never deployed keybindings + extensions to ~/.pi/agent/. Result: 4/14 smoke checks always failed. Match opencode-devbox's pattern: `docker run -d --rm "$IMAGE" tail -f /dev/null` keeps the entrypoint chain intact and overrides only CMD.