Every compile/vet/test path goes through the same golang:1.26-bookworm digest container used by mopac-keyproxy, so the host stays toolchain-free and builds are reproducible. Makefile is a thin front door over dev.sh.