Readiness and cleanup

stashbase agent docker doctor   # docker CLI, daemon, and default image status; non-zero exit if not ready
stashbase agent docker status   # list leftover per-run networks
stashbase agent docker cleanup  # remove leftovers after confirmation (--yes to skip)

doctor and status accept --json. For a Docker-backend profile, agent validate checks Docker readiness instead of the native backend.

Every run's network and containers are named after its session ID (ags_...), so you can match leftovers to their audit logs. A normal exit or Ctrl+C removes them. Leftovers appear only after a crash or SIGKILL. cleanup skips networks that belong to live local sessions. A --remote session has no local record, so cleanup shows creation times to help you avoid removing one that's still running.