Fix --rebuild-base: use sudo to delete root-owned base image files
Docker export creates root-owned files in the base image. The
previous code used Bos.OS.Path.delete which silently failed on
root-owned files, leaving the old base in place.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>