… and update example configurations

Updated the Dockerfile to support multi-architecture builds by adding necessary cross-compilation tools and adjusting the build process. Modified example configuration files to include new environment variables and updated the package.json to switch the development script from Bun to npm, ensuring compatibility with TypeScript. Added logging for custom environment variables in the TypeScript worker.

feat(example-typescript): replace Bun with npm in image resize demo worker setup

Switches to npm for dependency and script management. Updates the package manager and runtime scripts, removes Bun-specific setup, and adds a new lockfile.

refactor(example-rust): remove Rust image resize demo worker

fix(example-python): use asyncio.run with Event for keepalive (Python 3.14 compat)

fix(example-python): keep process alive with event loop to receive invocations

fix(example-python): use InitOptions instead of raw dict for register_worker

feat(example-python): add Python image resize demo worker

Mirrors the TypeScript example with health and thumbnail endpoints.
Uses iii-sdk Python package to connect to the engine and invoke
image_resize::resize via SDK channels.

fix(image-resize): skip config.yaml load when file doesn't exist

docs: add Podman runtime implementation plan

6-task plan covering PodmanAdapter creation, Docker/Sandbox removal,
microsandbox delegation update, managed.rs simplification, CLI cleanup,
and full build verification.

docs: add Podman runtime design spec

Replace Docker with Podman as sole container runtime. Remove SandboxAdapter
and --isolation flag. Dev mode stays microsandbox-only. Managed workers use
Podman with auto podman-machine management on macOS.

refactor: all manifests use iii: v1 (no v2 version needed)

fix(example-python): install iii-sdk directly instead of building from pyproject.toml

pip install . triggers a full build that spawns subprocesses hitting the
microsandbox 1024 fd limit. Install the SDK dep directly and use PYTHONPATH
to make the local module importable.

fix(example-python): use non-editable pip install (editable hits fd limit in msb)

fix(example-python): use system pip directly, skip venv (ensurepip broken in msb)

fix(example-python): remove sudo from setup, fix invalid pyproject.toml scripts

- Drop setup script: msb python image has Python 3.14, venv, and pip
- Remove invalid [project.scripts] entry that caused pip install failure
  (must be entrypoint reference, not shell command)

fix(example): remove apt-get from bun setup, microsandbox node image has curl

feat: upgrade all example manifests to iii.worker.yaml v2 format

- TypeScript/Bun, Python, Rust examples now use v2 schema
- Plain MB for memory instead of K8s-style (512Mi → 512)
- scripts section replaces dependencies section
- III_URL/III_ENGINE_URL removed from env (auto-injected by engine)

docs: add microsandbox runtime design spec

Microsandbox as primary strong-isolation runtime, Docker Sandbox as
fallback. iii.worker.yaml v2 format with structured runtime declarations
and auto-detection. Solves WebSocket proxy issue with Docker Sandbox.

docs(example-rust): document sandbox limitation on Apple Silicon (rustc SIGILL)

fix(example-rust): use debug build in sandbox to avoid SIGILL on ARM VM

fix(example-rust): cargo clean before build to avoid cross-platform target corruption

fix(examples): use sudo for apt-get in sandbox setup

fix(example-rust): install build-essential for cc linker in sandbox

fix(example-rust): use iii-sdk from crates.io instead of local path

Path deps aren't visible inside the sandbox since only the project
workspace directory is synced.

fix(example-python): use venv for pip install inside sandbox VM

feat(examples): add Python and Rust image-resize demo workers

Both mirror the Node.js example — health check + thumbnail endpoints
connecting to image_resize::resize via channels. Each includes
iii.worker.yaml for sandbox dev with `iii worker dev`.

feat(example): add iii.worker.yaml for sandbox dev environment

Declares bun runtime setup, install, and run commands so
'iii worker dev' knows how to build the sandbox VM.

docs: add Docker Sandbox runtime design spec

Replaces Firecracker with Docker Sandboxes for strong isolation.
microVM isolation on Mac/Windows without KVM. Two runtimes (docker,
sandbox), two deployment modes (per-worker sandbox, engine-in-sandbox).

refactor(launcher): remove iii-launcher module and associated files

This commit deletes the iii-launcher module, including its Cargo.toml, Cargo.lock, and source files. The removal streamlines the project structure as the launcher functionality is no longer needed.

feat(launcher): add health check loop with exponential backoff restarts

feat(launcher): return restart info in status response

feat(launcher): add configurable stop timeout to Docker adapter

SIGTERM + grace period before SIGKILL: 30s for explicit stops,
10s for pre-start cleanup.

feat(launcher): add restart tracking fields to ManagedWorker state

docs: add Phase 2A runtime hardening implementation plan

6 tasks: state enrichment, Docker stop timeout, resource enforcement,
health check loop, enriched status output, SDK graceful shutdown drain.

docs: add Phase 2A runtime hardening design spec

Resource enforcement from manifests, health check loop with exponential
backoff restarts, graceful shutdown via Docker SIGTERM + SDK drain.

feat(launcher): add iii-launcher worker with DockerAdapter

RuntimeAdapter trait, Docker CLI implementation, launcher state
persistence, and 5 function handlers (pull, start, stop, status, logs).

feat(image-resize): add Dockerfile with embedded manifest, prepare SDK manifest integration

feat(ci): add OCI build workflow, registry v2 format, switch release from binary to OCI

feat(image-resize): emit iii worker manifest in YAML format

docs: add Phase 1 implementation plan for iii worker abstraction layer

13 tasks covering manifest types, protocol extensions, manifest-driven
readiness, SDK support, OCI build, launcher worker with Docker adapter,
CLI commands, registry v2, CI/CD workflow, and E2E verification.

docs: add iii worker abstraction layer design spec

Design for decoupling worker artifacts and contracts from runtime
substrates. OCI images as canonical packaging, dedicated launcher
sidecar, manifest-driven readiness, and backward-compatible protocol
extensions.

…dynamic versioning

…and enhance CORS options

- Introduced new worker definitions for iii-stream and iii-http with specific configurations.
- Enhanced CORS settings to include additional allowed methods and clarified allowed origins.
- Removed deprecated module definitions for a cleaner configuration structure.