Sandboxed code migration agent

A cookbook recipe for agents doing real repository work, one scoped task at a time.