Laufzeiten: die MCP-Bruecke ist auch ohne Starter in der Sandbox (#712)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/ClawdDotNet.Core/Runtimes/ForeignRuntime.cs

@@ -56,6 +56,12 @@ public sealed record ForeignRunContext
         return mounts;
     }
 
+    /// <summary>
+    /// What must be visible read-only for the MCP bridge: the application. Mounted whenever
+    /// there is MCP — not only when the launcher runs, which needs network or secrets.
+    /// </summary>
+    public IReadOnlyList<string> HelperPaths() => HasMcp ? Helper!.ReadOnlyPaths : [];
+
     /// <summary>What a program in the sandbox needs to reach the MCP server itself.</summary>
     public IReadOnlyDictionary<string, string> McpEnvironment()
     {
@@ -72,6 +78,8 @@ public sealed record ForeignRunContext
             environment["CLAWD_MCP_SOCKET"] = McpSocketInSandbox;
             environment[Mcp.McpStdioBridge.TokenFileVariable] = Private + "/" + TokenFileName;
             environment["CLAWD_HELPER"] = Helper!.Executable;
+            foreach (var (key, value) in Helper.Environment)
+                environment[key] = value;
         }
         return environment;
     }