A Sovereign Coding Agent on macOS – Pi in an Apple Container; Zero NPM on Host