Loud, actionable banner that filesystem-touching tools surface when the
active runtime uses an ephemeral workspace — e.g. a Docker container
with no host volume mount, where the workspace is a private tmpfs. In that
mode writes succeed inside the container but never reach the host and are
discarded when the session ends, and reads may return stale or empty data.
Surfacing this prevents the silent data loss reported in issue #4627.