chore: move sandbox tool installation earlier in Dockerfile

Relocate the installation of curl, wget, mawk, gcc, and libc-dev to before
Node.js and Python setup steps. This streamlines the Dockerfile by grouping
sandbox tool installs together and avoids redundant apt-get runs.

Author: koki-develop

Dockerfile

@@ -21,6 +21,12 @@ COPY --from=mise /usr/local/bin/mise /usr/local/bin/mise
 
 ENV MISE_DATA_DIR="/mise"
 
+# Install tools for sandbox
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+      curl wget mawk gcc libc-dev && \
+    rm -rf /var/lib/apt/lists/*
+
 # Node.js
 ENV PATH="/mise/installs/node/24.14.0/bin:$PATH"
 RUN mise use -g node@24.14.0
@@ -43,12 +49,6 @@ RUN cd /tmp/preinstall && \
 ENV PATH="/mise/installs/python/3.13.12/bin:$PATH"
 RUN mise use -g python@3.13.12
 
-# Install tools for sandbox
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-      curl wget mawk gcc libc-dev && \
-    rm -rf /var/lib/apt/lists/*
-
 # Rust
 ENV RUSTUP_HOME="/mise/rustup" \
     CARGO_HOME="/mise/cargo"