fix(ci): use npm --prefix to avoid cd breaking require.resolve

The previous cd into /tmp/sandbox-runtime caused the subsequent
node require.resolve call to run in the wrong directory, unable to
find @anthropic-ai/sandbox-runtime in safeclaw's node_modules.
Use npm --prefix instead to keep cwd in GITHUB_WORKSPACE.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: linuxdevel

.github/workflows/ci.yml

@@ -31,7 +31,8 @@ jobs:
       - name: Build sandbox-runtime from source
         run: |
           git clone --depth 1 https://github.com/linuxdevel/sandbox-runtime /tmp/sandbox-runtime
-          cd /tmp/sandbox-runtime && npm install && npm run build
+          npm --prefix /tmp/sandbox-runtime install
+          npm --prefix /tmp/sandbox-runtime run build
           SRT_DIR=$(node -e "console.log(require.resolve('@anthropic-ai/sandbox-runtime/package.json').replace('/package.json',''))")
           cp -r /tmp/sandbox-runtime/dist "$SRT_DIR/"
 

.github/workflows/release.yml

@@ -41,7 +41,8 @@ jobs:
       - name: Build sandbox-runtime from source
         run: |
           git clone --depth 1 https://github.com/linuxdevel/sandbox-runtime /tmp/sandbox-runtime
-          cd /tmp/sandbox-runtime && npm install && npm run build
+          npm --prefix /tmp/sandbox-runtime install
+          npm --prefix /tmp/sandbox-runtime run build
           SRT_DIR=$(node -e "console.log(require.resolve('@anthropic-ai/sandbox-runtime/package.json').replace('/package.json',''))")
           cp -r /tmp/sandbox-runtime/dist "$SRT_DIR/"