Refactor installation and runner scripts for enhanced usability and security

- Updated the installation script to clarify that production wrappers do not include fixed test secrets, improving user guidance for local testing.
- Modified the jiggablend-manager and jiggablend-runner scripts to remove fixed test configurations, emphasizing the use of local test credentials via `make init-test`.
- Enhanced error handling in the runner script to ensure that an API key is provided, improving security and user feedback.
- Added new flags and options for the runner, including sandboxing capabilities and GPU ray tracing control, enhancing flexibility for users.
- Improved README documentation to reflect changes in usage and configuration, ensuring users have clear instructions for setup and execution.

internal/runner/blender/detect.go

@@ -114,3 +114,18 @@ func isGPUControllerLine(line string) bool {
 		strings.Contains(line, "3d controller") ||
 		strings.Contains(line, "display controller")
 }
+
+func parseRocmAgentArch(output string) (arch string, ok bool) {
+	scanner := bufio.NewScanner(strings.NewReader(output))
+	for scanner.Scan() {
+		line := strings.TrimSpace(scanner.Text())
+		if !strings.HasPrefix(line, "Name:") {
+			continue
+		}
+		name := strings.TrimSpace(strings.TrimPrefix(line, "Name:"))
+		if strings.HasPrefix(name, "gfx") {
+			return name, true
+		}
+	}
+	return "", false
+}

internal/runner/blender/detect_hiprt_test.go

@@ -0,0 +1,19 @@
+package blender
+
+import "testing"
+
+func TestParseRocmAgentArch(t *testing.T) {
+	input := `ROCk module is loaded
+Agent 1
+  Name:                    gfx1151
+  Marketing Name:          AMD Radeon Graphics
+`
+	arch, ok := parseRocmAgentArch(input)
+	if !ok {
+		t.Fatal("expected arch to be parsed")
+	}
+	if arch != "gfx1151" {
+		t.Fatalf("arch = %q, want gfx1151", arch)
+	}
+}
+