v2.4.0

- Add managed installation into a caller-selected wrapper directory without
  replacing existing SSH keys.
- Add nested box launches with host-path propagation, sibling wrapper mounts,
  and shared `AICODEBOX_ENV_*` and `AICODEBOX_MOUNT_*` settings.
- Download the installed wrapper from the matching immutable release tag.