Port the launcher to Go on the podman API bindings

packaging/nfpm.yaml

@@ -2,7 +2,7 @@
 name: agent-sandbox
 version: ${PACKAGE_VERSION}
 release: 1
-arch: noarch
+arch: amd64
 platform: linux
 description: "Run Claude Code in a rootless podman sandbox with allowlisted egress"
 maintainer: Ben Vincent <ben@unkin.net>
@@ -11,7 +11,6 @@ license: MIT
 
 depends:
   - podman
-  - bash
 
 contents:
   - src: dist/agent-sandbox
@@ -22,3 +21,15 @@ contents:
     dst: /usr/share/agent-sandbox/allowed-hosts
     file_info:
       mode: 0644
+  - src: dist/completions/agent-sandbox.bash
+    dst: /usr/share/bash-completion/completions/agent-sandbox
+    file_info:
+      mode: 0644
+  - src: dist/completions/_agent-sandbox
+    dst: /usr/share/zsh/site-functions/_agent-sandbox
+    file_info:
+      mode: 0644
+  - src: dist/completions/agent-sandbox.fish
+    dst: /usr/share/fish/vendor_completions.d/agent-sandbox.fish
+    file_info:
+      mode: 0644