fix(langgraph): address CodeRabbit review feedback

- Move USER 1001 before pip install so packages are owned by the
  runtime user (avoids __pycache__ permission issues)
- Replace trap EXIT with explicit rm -rf in build docs (trap doesn't
  fire in interactive shells until terminal closes)

Author: rrbanda

agents/langgraph/templates/react_agent/Containerfile.openshell

@@ -29,6 +29,8 @@ COPY --from=ghcr.io/astral-sh/uv@sha256:fc93e9ecd7218e9ec8fba117af89348eef8fd246
 RUN install -d -o 1001 -g 0 -m 775 /sandbox
 WORKDIR /sandbox
 
+USER 1001
+
 # Install the auth component first (resolves the path dependency issue),
 # then install the main package with tracing extra.
 COPY --chown=1001:0 components/auth/ ./components/auth/
@@ -47,8 +49,6 @@ COPY --chown=1001:0 main.py .
 COPY --chown=1001:0 playground/ ./playground/
 COPY --chown=1001:0 images/ ./images/
 
-USER 1001
-
 ENV PORT=8080 \
     PYTHONPATH=/sandbox \
     PATH="/opt/app-root/bin:${PATH}"

agents/langgraph/templates/react_agent/OPENSHELL.md

@@ -18,10 +18,12 @@ cd agents/langgraph/templates/react_agent
 # Copy repo-level assets into build context
 cp -r ../../../../images ./images
 mkdir -p ./components && cp -r ../../../../components/auth ./components/auth
-trap 'rm -rf ./images ./components' EXIT
 
 podman build --platform linux/amd64 -t quay.io/<your-org>/langgraph-sandbox:latest -f Containerfile.openshell .
 podman push quay.io/<your-org>/langgraph-sandbox:latest
+
+# Clean up build context
+rm -rf ./images ./components
 ```
 
 Ensure the quay.io repository is public so the cluster can pull without imagePullSecrets.