pub fn container_command_failed(code: i32) -> String
Generic fallback when none of the container error classifiers matched. The exit code is the only signal we can show without leaking unfiltered remote stderr.