Add dev harness routing all builds through the digest-pinned builder
Every compile/vet/test path goes through the same golang:1.26-bookworm digest container used by mopac-keyproxy, so the host stays toolchain-free and builds are reproducible. Makefile is a thin front door over dev.sh.
This commit is contained in: