* fix(setup): honor sandbox image in BOM-prefixed configs * fix(setup): normalize CRLF and preserve captured pull arguments