One Docker socket to rule them all: Escaping Codex, Cursor, and Gemini CLI | Dark Hacker News