Dagger shells out to the `docker` binary to provision its BuildKit engine container. Phase 3 removed docker-ce-cli, breaking all Dagger calls in CI. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>