chore(image): bump sandbox tag 0.1.13 → 0.2.0

Picks up the recent in-image deps (``pip install caido-sdk-client``
for ``python_action`` + Caido CLI bumped to v0.56.0). 0.2.0 is the
new minor since this is the first SDK-migration-era image; users
pulling the new strix should pull the matching new image.

Updated:
- ``strix/config/settings.py:64`` — ``RuntimeSettings.image`` default
- ``strix/runtime/session_manager.py`` + ``strix/orchestration/scan.py`` — docstring example
- ``HARNESS_WIKI.md`` — three references in the runtime + config docs
- ``MIGRATION_EVALUATION.md`` — the SDK-bridging note

The historical changelog row (``HARNESS_WIKI.md:744`` — "bump to
0.1.13") stays untouched on purpose; it records what commit
``640bd67`` did, not the current pin.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

strix/config/settings.py

@@ -61,7 +61,7 @@ class RuntimeSettings(BaseSettings):
     model_config = _BASE_CONFIG
 
     image: str = Field(
-        default="ghcr.io/usestrix/strix-sandbox:0.1.13",
+        default="ghcr.io/usestrix/strix-sandbox:0.2.0",
         alias="STRIX_IMAGE",
     )
     backend: str = Field(default="docker", alias="STRIX_RUNTIME_BACKEND")

strix/orchestration/scan.py

@@ -191,7 +191,7 @@ async def run_strix_scan(
             if omitted — callers that want resume-after-crash semantics
             should pass a stable id.
         image: Docker image tag for the sandbox (e.g.
-            ``"strix-sandbox:0.1.13"``).
+            ``"strix-sandbox:0.2.0"``).
         sources_path: Host directory mounted into ``/workspace/sources``.
         tracer: Optional Strix tracer. Stored in context for the
             telemetry hook chain. Pass ``None`` for unit tests.

strix/runtime/session_manager.py

@@ -54,7 +54,7 @@ async def create_or_reuse(
 
     Args:
         scan_id: Caller-provided scan identifier (used as cache key).
-        image: Docker image tag (e.g. ``"strix-sandbox:0.1.13"``).
+        image: Docker image tag (e.g. ``"strix-sandbox:0.2.0"``).
         sources_path: Host directory mounted into the container's
             ``/workspace/sources`` so the agent can read user code.