Run Claude Code unattended: capped spend, sandboxed execution, signed receipt, enforced from outside the agent's process.