Add Apple Container toolkit for macOS VM-isolated development

CLAUDE.md

@@ -67,6 +67,10 @@ GitHub Actions workflow builds multi-arch images (amd64, arm64) on tag push and
 3. Build: `docker buildx build -t my-devkit -f path/to/Dockerfile .`
 4. Update `devcontainer.json` image field to use your custom image
 
+## Troubleshooting from Inside a Devbox
+
+When the user reports an issue from a running devbox container, check `$DEVBOX_GIT_COMMIT` to see which commit the image was built from. A `-dirty` suffix means the build included uncommitted local changes. If the value disagrees with the user's expectation (e.g. they expected a recent fix to be present), the image likely wasn't actually rebuilt.
+
 ## Version Management
 
 Current version: `VERSION=2026.05` in Makefile. Releasing:

Makefile

@@ -1,7 +1,7 @@
 # Note: these can be overriden on the command line e.g. `make VERSION=2026.05`
 VERSION=2026.05
 
-.PHONY: base-amd64 base-arm64 base alapenna alapenna-ghostty
+.PHONY: base-amd64 base-arm64 base alapenna alapenna-ghostty alapenna-container
 
 base-amd64:
 	docker build --push --platform=linux/amd64 -t portainer/dev-toolkit:$(VERSION)-amd64 -f Dockerfile .
@@ -22,3 +22,11 @@ alapenna:
 
 alapenna-ghostty:
 	docker build --platform=linux/arm64 -t portainer-dev-toolkit:alapenna-ghostty -f user-toolkits/alapenna-ghostty/Dockerfile .
+
+# Install/update the devbox-apple script into ~/.local/bin and rebuild the image.
+# Requires Apple's `container` CLI (macOS 26+ on Apple Silicon).
+alapenna-container:
+	mkdir -p $(HOME)/.local/bin
+	cp user-toolkits/alapenna-container/devbox-apple $(HOME)/.local/bin/devbox-apple
+	chmod +x $(HOME)/.local/bin/devbox-apple
+	cd user-toolkits/alapenna-container && $(HOME)/.local/bin/devbox-apple build