feat: chat-created programs as executable skills — safe sandbox execution