Batch sudo calls in Stack.merge — one sudo per container, not per layer
Stack.merge was spawning a separate sudo cp process per dep layer,
causing hundreds of zombie sudo processes per container build. Now
batches all cp commands into a single sudo bash -c call.
Also includes the earlier fiber explosion fix for the DAG executor.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>