feat: add --mount-bin-paths option for toolchain access

[Copilot]

Users need host-installed toolchains (Go, Rust, Python, etc.) accessible inside the agent container.

Changes

• New CLI option --mount-bin-paths <paths>: Comma-separated list of host directories containing binaries
• Volume mounting: Each path is mounted read-only at the same location inside the container
• PATH integration: Specified paths are prepended to container PATH for precedence
• Validation: Paths must be absolute, exist, and be directories

Usage

sudo awf \
  --allow-domains github.com \
  --mount-bin-paths /usr/local/go/bin,/home/user/.cargo/bin \
  -- go version

Original prompt

---

This section details on the original issue you should resolve

<issue_title>bin mounting</issue_title>
<issue_description>The user may install toolchains that need to be accessible in the agent container.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes bin mounting #99

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[github-actions]

💥 WHOOSH! Smoke Claude springs into action on this pull request! [Panel 1 begins...]

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• [WIP] Add tests for blocked domain detection in log parsers #119: [WIP] Add tests for blocked domain detection in log parsers
• docs: streamline README for first-time visitors #111: docs: streamline README for first-time visitors

Tests:

• ✅ GitHub MCP: Retrieved PR data
• ✅ File Writing: Created test file
• ✅ Bash Tool: Verified file content

Status: PASS

📰 BREAKING: Report filed by Smoke Copilot fer issue #120 🗺️

[github-actions]

Smoke Test Results (Claude)

Last 2 merged PRs:

• docs: streamline README for first-time visitors #111: docs: streamline README for first-time visitors
• feat: add install script with sha256 validation #108: feat: add install script with sha256 validation

Test Results:

• ✅ GitHub MCP (list PRs)
• ✅ File writing (/tmp/gh-aw/agent/smoke-test-claude-20378125984.txt)
• ✅ Bash tool (file verification)
• ❌ Playwright (ERR_TUNNEL_CONNECTION_FAILED)

Status: FAIL (Playwright connectivity issue)

💥 [THE END] — Illustrated by Smoke Claude fer issue #120 🗺️

[github-actions]

Test Coverage Report

Metric	Coverage	Covered/Total
Lines	66.18%	728/1100
Statements	66.4%	751/1131
Functions	71.65%	91/127
Branches	61.18%	238/389

Coverage Thresholds

The project has the following coverage thresholds configured:

• Lines: 38%
• Statements: 38%
• Functions: 35%
• Branches: 30%

---

Coverage report generated by `npm run test:coverage`