v2026.08.13.03 — 2026-08-13

• fix(isolation): apply cgroup slice limits at site provision, not just at agent start