Add brood-box to Runtime level security

[JAORMX]

Summary

Adds brood-box to the Runtime level security section.

Brood-box is a CLI tool for running coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs. It provides runtime-level security isolation with:

• Workspace snapshot diffing -- COW snapshots are created before the VM starts, and changes are diffed and reviewed after the agent finishes
• Egress control -- DNS-aware egress policies restrict what the agent can access on the network
• MCP authorization profiles -- Cedar-based policies control what MCP operations agents can perform

This is a good fit for the Runtime level security section alongside sysbox, as it focuses on providing hardware-level isolation boundaries for untrusted workloads.

🤖 Generated with Claude Code and Brood Box