Function proxy_socket_dir 

pub fn proxy_socket_dir(container_id: &str) -> PathBuf

Returns the proxy socket directory for a container.

Uses ~/.clawbox/proxies/ instead of /tmp to avoid predictable paths. Creates the base directory with mode 0o700 if it does not exist.