Sandboxes of one user share /tmp/claude

On Linux, sandbox-runtime makes /tmp/claude writable in every sandbox a user starts, so agents that run side by side, each with its own filesystem grant, can read each other's temporary files.