fix(sandbox): rotate openshell.log daily, keep 3 files

[Kh4L]

Summary

• Replaces the unbounded append-only /var/log/openshell.log with a RollingFileAppender that rotates daily and retains at most 3 files
• No new dependencies — tracing-appender is already a workspace dependency in openshell-sandbox
• Falls back to stdout-only logging if /var/log is not writable (existing behavior preserved)

Related Issue

Closes #30

Changes

• crates/openshell-sandbox/src/main.rs: replace std::fs::OpenOptions + non_blocking(file) with RollingFileAppender::builder() configured for daily rotation and a 3-file cap

Testing

• mise run test passes
• Sandbox logs appear as /var/log/openshell.YYYY-MM-DD.log inside a running sandbox
• Old log files beyond the 3-file limit are pruned on rotation

Checklist

• Follows Conventional Commits format
• Signed-off-by line included (git commit -s)
• No new dependencies introduced

[github-actions]

Thank you for your interest in contributing to OpenShell, @Kh4L.

This project uses a vouch system for first-time contributors. Before submitting a pull request, you need to be vouched by a maintainer.

To get vouched:

1. Open a Vouch Request discussion.
2. Describe what you want to change and why.
3. Write in your own words — do not have an AI generate the request.
4. A maintainer will comment /vouch if approved.
5. Once vouched, open a new PR (preferred) or reopen this one after a few minutes.

See CONTRIBUTING.md for details.

[johntmyers]

Reopening — you were incorrectly closed by the vouch gate. The workflow couldn't verify your NVIDIA org membership due to a GITHUB_TOKEN permissions issue. Fix is in #442.

[github-actions]

Thank you for your interest in contributing to OpenShell, @Kh4L.

This project uses a vouch system for first-time contributors. Before submitting a pull request, you need to be vouched by a maintainer.

To get vouched:

1. Open a Vouch Request discussion.
2. Describe what you want to change and why.
3. Write in your own words — do not have an AI generate the request.
4. A maintainer will comment /vouch if approved.
5. Once vouched, open a new PR (preferred) or reopen this one after a few minutes.

See CONTRIBUTING.md for details.

[johntmyers]

Reopening now that #442 has merged. The vouch gate will now check author_association from the webhook payload, which correctly identifies you as an NVIDIA org member.

[github-actions]

Thank you for your interest in contributing to OpenShell, @Kh4L.

This project uses a vouch system for first-time contributors. Before submitting a pull request, you need to be vouched by a maintainer.

To get vouched:

1. Open a Vouch Request discussion.
2. Describe what you want to change and why.
3. Write in your own words — do not have an AI generate the request.
4. A maintainer will comment /vouch if approved.
5. Once vouched, open a new PR (preferred) or reopen this one after a few minutes.

See CONTRIBUTING.md for details.

[johntmyers]

Reopening — the vouch gate now fetches author_association via the REST API (#444), which correctly identifies you as an NVIDIA org member. Sorry for the repeated closures!

[github-actions]

Thank you for your interest in contributing to OpenShell, @Kh4L.

This project uses a vouch system for first-time contributors. Before submitting a pull request, you need to be vouched by a maintainer.

To get vouched:

1. Open a Vouch Request discussion.
2. Describe what you want to change and why.
3. Write in your own words — do not have an AI generate the request.
4. A maintainer will comment /vouch if approved.
5. Once vouched, open a new PR (preferred) or reopen this one after a few minutes.

See CONTRIBUTING.md for details.