MIL-013: Debian container and Windows Sandbox checks

A Debian image (python:3.13-slim-bookworm with Xvfb and GNOME's window
manager) runs the linters, the whole test suite, the screenshots and the
smoke test of a PyInstaller Linux binary and of the source program, so no
window opens on the development machine. The screenshot tool works on
Linux, a smoke driver presses the known button with the virtual mouse, and
Windows Sandbox scripts are written (not run, they open a window on the
host). README and the wiki Install pages describe it. Review records
RC-077 (Python) and RC-078 (shell).

Task: MIL-013#2
Task: MIL-013#3
Task: MIL-013#4
Task: MIL-013#5
Task: MIL-013#6
Task: MIL-013#7
Task: MIL-013#9
Task: MIL-013#10

docs/sqa/traceability-matrix.md

@@ -72,6 +72,8 @@ updated whenever an artifact instance is created or reviewed.
 | PY-MIL-011 | Python Source Code | - | - | DCD-001, ADR-0002 | - | [RC-066] |
 | PY-FIX-001 | Python Source Code | - | - | PY-MIL-008 | - | [RC-049] |
 | PY-MIL-012 | Python Source Code | - | - | MIL-012 | - | [RC-071] |
+| PY-MIL-013 | Python Source Code | - | - | MIL-013 | - | [RC-077] |
+| SH-MIL-013 | Shell Script | - | - | MIL-013 | - | [RC-078] |
 
 ## Coverage Notes
 
@@ -207,3 +209,7 @@ updated whenever an artifact instance is created or reviewed.
 [MIL-013]: ../milestones/mil-013-container-checks.md
 [ADR-0005]: ../adr/adr-0005-container-and-sandbox-checks.md
 [f86bc91]: https://git.tirsystem.com/Tirsvad-Udemy-100-days-of-code/031-flash-card/commit/f86bc9136e7719fbcd049a4f803959019b7d2df3
+[RC-077]: ./reviews/rc-077-py-mil-013.md
+[RC-078]: ./reviews/rc-078-sh-mil-013.md
+[PY-MIL-013]: ../../tools
+[SH-MIL-013]: ../../tools/docker