ExperimentalReadonly Experimentalendpointshost:port endpoints for the started services — where to point your task.
Intended to ALSO pin an egress allowlist (composing with src/egress.ts),
but that wall is a FUTURE hardening: the eval tier does NOT apply it today, so
right now these just identify the services. Do not read them as a network
confinement guarantee — see the SAFETY note in this module's header.
Readonly ExperimentalhandlesThe started services, keyed by the name declared in the services map.
A live set of started services + the teardown that disposes them. Returned by experimental_startServices; the caller wires
endpointsinto the run's egress allowlist and mapshandlesinto the agent's env / intomeasure.