Bubblewrap sandbox made Ollama CLI fail with read-only ~/.ollama temp files

A benchmark orchestrator ran local Ollama-backed agents inside a Bubblewrap sandbox. The sandbox used a read-only bind of the host root and intentionally did not bind the full home directory. As a result, the Ollama CLI failed immediately because it attempted to create temporary files under ~/.ollama, which was read-only inside the sandbox.