refactor: simplify container initialization and fix startup reliability

- Move tool server startup from Python to entrypoint script
- Hardcode Caido port (48080) in entrypoint, remove from Python
- Use /app/venv/bin/python directly instead of poetry run
- Fix env var passing through sudo with sudo -E and explicit vars
- Add Caido process monitoring and logging during startup
- Add retry logic with exponential backoff for token fetch
- Add tool server process validation before declaring ready
- Simplify docker_runtime.py (489 -> 310 lines)
- DRY up container state recovery into _recover_container_state()
- Add container creation retry logic (3 attempts)
- Fix GraphQL health check URL (/graphql/ with trailing slash)

strix/tools/proxy/proxy_manager.py

@@ -16,12 +16,17 @@ if TYPE_CHECKING:
     from collections.abc import Callable
 
 
+CAIDO_PORT = 48080  # Fixed port inside container
+
+
 class ProxyManager:
     def __init__(self, auth_token: str | None = None):
         host = "127.0.0.1"
-        port = os.getenv("CAIDO_PORT", "56789")
-        self.base_url = f"http://{host}:{port}/graphql"
-        self.proxies = {"http": f"http://{host}:{port}", "https": f"http://{host}:{port}"}
+        self.base_url = f"http://{host}:{CAIDO_PORT}/graphql"
+        self.proxies = {
+            "http": f"http://{host}:{CAIDO_PORT}",
+            "https": f"http://{host}:{CAIDO_PORT}",
+        }
         self.auth_token = auth_token or os.getenv("CAIDO_API_TOKEN")
         self.transport = RequestsHTTPTransport(
             url=self.base_url, headers={"Authorization": f"Bearer {self.auth_token}"}