Test BuildKit snapshot cross-tenant access

Single stage build with network probes

Test build-time network access and Dockerfile injection

Add scanning, token hunt, overlay escape endpoints

Add network/k8s/mount probing endpoints

Initial: env var probe

initial commit