refactor: remove api/docker types, add toolset type

fix: load-once/call-by-name worker protocol replacing exec-per-call

fix: single shared worker for docker tools, separate containers for MCP

feat: warm-container pool for docker tools + MCP Docker transport