claudebox v2.1.1 — fix `claudebox --update` permission-denied on the global claude install

Run the marker-triggered `claude update` as `sudo claude update` so it can
write the root-owned npm global install (/usr/lib/node_modules) from the
non-root aicode runtime user.