feat(resource): add --clone-into to container-instance and fix devcontainer-instance sandbox strategy

- Adds a --clone-into option to the container-instance command to clone repository contents into a specified path during container setup.
- Fixes the devcontainer-instance sandbox strategy to ensure proper isolation, correct mount permissions, and deterministic behavior across environments.
- Updates related validation and error handling to reflect the new option and sandbox changes.

ISSUES CLOSED: #7555

benchmarks/devcontainer_lifecycle_bench.py

@@ -80,7 +80,7 @@ class TimeTransitionValidation:
         """Time valid transition check (1000 iterations)."""
         for _ in range(1000):
             validate_transition(
-                ContainerLifecycleState.DETECTED,
+                ContainerLifecycleState.DISCOVERED,
                 ContainerLifecycleState.BUILDING,
             )
 
@@ -88,7 +88,7 @@ class TimeTransitionValidation:
         """Time invalid transition check (1000 iterations)."""
         for _ in range(1000):
             validate_transition(
-                ContainerLifecycleState.DETECTED,
+                ContainerLifecycleState.DISCOVERED,
                 ContainerLifecycleState.RUNNING,
             )
 
@@ -201,7 +201,7 @@ class TimeRegistryOperations:
                 resource_id=f"01BENCHREG{i:016d}",
                 current_state=ContainerLifecycleState.RUNNING
                 if i % 2 == 0
-                else ContainerLifecycleState.DETECTED,
+                else ContainerLifecycleState.DISCOVERED,
             )
             set_lifecycle_tracker(tracker)