feat(dev): add container dev runner

[tejaskash]

Summary

• add a streamed ContainerDevRunner for Docker, Podman, and Finch builds
• validate build inputs, protect widened contexts with .dockerignore, and map protocol-specific loopback ports
• keep environment and build-argument values out of argv while explicitly cleaning up project-scoped containers
• cover runtime selection, command construction, validation, cancellation, cleanup, and failure sequencing with fake process tests

Stack

• depends on feat(dev): CodeZip dev runner and process lifecycle core #1883
• intentionally targets feat/dev-server-core; retarget to refactor after feat(dev): CodeZip dev runner and process lifecycle core #1883 merges
• handler wiring and AWS credential materialization remain out of scope

Verification

• bun test (1013 tests)
• bun test src/core/dev/ (30 tests)
• bun run typecheck
• bun run lint:check
• bun run format:check
• bun run build

[codecov-commenter]

Codecov Report

❌ Patch coverage is 99.42529% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 96.81%. Comparing base (531d068) to head (113dcde).

Files with missing lines	Patch %	Lines
src/io/exec.ts	80.00%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##           refactor    #1962      +/-   ##
============================================
+ Coverage     96.78%   96.81%   +0.03%     
============================================
  Files           326      327       +1     
  Lines         18061    18231     +170     
============================================
+ Hits          17480    17650     +170     
  Misses          581      581              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[aidandaly24]

One small nit that could be fixed another time otherwise this lgtm: