docs: add Amika sandbox guide

[theoephraim]

Adds a sandbox recipe for Amika (local Docker sandboxes + hosted cloud, agents preinstalled), following the E2B/Fly/Docker-Sandboxes shape: broker on your machine for local sandboxes (proxy run --url ws://host.docker.internal:8080), tunnel URL for Amika Cloud.

Verified live against amika 0.14.1 with varlock 1.16.1, both modes:

• Local (Docker): tunnel handshake, placeholder env adoption, and CA self-wiring from the sandbox; broker log shows inject on the request and scrubbed on the response
• Amika Cloud: same test end to end from a hosted sandbox (Daytona-backed) through a cloudflared quick tunnel (wss://) to a broker on my machine; --setup-script and --env work at remote create, and --no-agent-credential correctly skips vault credentials there
• --setup-script / .amika/config.toml [lifecycle] and --env seams
• npm global install fails in the image (prefix /usr); the guide uses the binary install plus a PATH line
• amika copies host agent credential files (~/.codex/auth.json, ~/.claude.json, OpenCode auth) into every local sandbox unconditionally; --no-agent-credential does not gate it (vault-only, confirmed in their source). The guide calls this out and scrubs the rwcopy copies in the setup script (verified the originals stay untouched).

[pullfrog]

This run croaked 😵

The workflow encountered an error before any progress could be reported. Please check the link below for details.

  ^{｜ Rerun failed job ➔ ｜ View workflow run ｜ via Pullfrog ｜ 𝕏}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	varlock-website	c7f0435	Commit Preview URL Branch Preview URL	Aug 17 2026, 06:34 PM

[theoephraim]

closing for now - will come back to it