Containers created by kubectl debug with the restricted profile can lack expected protections. Separately…

Containers created by kubectl debug with the restricted profile can lack expected protections. Separately…: a task in rh-swe-bench (Harbor dataset). What the agent is asked, how it is graded, what it runs in, and its files.