Docker CLI tool download, installation, and management.
Reads tool versions and checksums from assets.lock, downloads Docker CLI
binaries (docker, buildx, compose, credential helpers), verifies SHA-256
checksums, and installs them to ~/.arcbox/runtime/bin/.