Lobsters: Sandboxing coding agents with bubblewrap