test: code exec on mac

[ehhuang]

Summary:

1. adds option to not use bwrap for code execution
2. disable bwrap when running tests on macs

Test Plan:

LLAMA_STACK_CONFIG=fireworks pytest -s -v tests/integration/agents/test_agents.py --safety-shield meta-llama/Llama-Guard-3-8B --text-model meta-llama/Llama-3.1-8B-Instruct

Verify code_interpreter result in logs

INFO 2025-03-11 08:10:39,858 llama_stack.providers.inline.agents.meta_reference.agent_instance:1032 agents: tool
call code_interpreter completed with result: content='completed\n\n541\n' error_message=None error_code=None
metadata=None

[ashwinb]

what's the motivation? so we can actually get this code path exercised and robust?

[yanxi0830]

Wouldn't this be a security risk?

[ehhuang]

what's the motivation? so we can actually get this code path exercised and robust?

Yea so we can actually run tests with code_interpreter on macs.

Wouldn't this be a security risk?

This is only enabled in pytest. Should be ok?

[ashwinb]

cool