refactor: make embedded runtime the default build target

Align with brood-box: `task build` now produces a self-contained binary
with embedded propolis runtime. Drop the separate plain-Go build target.
`build-dev` / `build-dev-darwin` become aliases for `build`. Fix
PROPOLIS_VERSION variable to use awk instead of go template syntax that
conflicts with Taskfile delimiters.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: JAORMX

CLAUDE.md

@@ -5,8 +5,7 @@ MCP server for isolated code execution via propolis microVMs. Go + mcp-go, Strea
 ## Commands
 
 ```bash
-task build           # Build binary (CGO_ENABLED=0)
-task build-dev       # Build self-contained binary with embedded propolis runtime
+task build           # Build self-contained binary with embedded propolis runtime
 task test            # go test -v -race ./...
 task lint            # golangci-lint run ./...
 task verify          # fmt + lint + test (CI gate)
@@ -28,7 +27,7 @@ Run a single test: `go test -v -race -run TestName ./pkg/path/to/package`
 
 ## Things That Will Bite You
 
-- **propolis is a tagged dependency (v0.0.15)**: Fetched via normal Go module resolution. `build-dev` embeds propolis-runner, libkrun, and libkrunfw into the binary (downloaded via `task fetch-runtime`/`task fetch-firmware`, verified with sha256sums). Use `build-dev-system` for the old libkrun-devel path.
+- **propolis is a tagged dependency (v0.0.15)**: `task build` embeds propolis-runner, libkrun, and libkrunfw into the binary (downloaded via `task fetch-runtime`/`task fetch-firmware`, verified with sha256sums). Use `build-dev-system` for the system libkrun-devel path.
 - **Image cache and log level**: `WAGGLE_IMAGE_CACHE_DIR` (default `~/.cache/waggle/images/`) enables shared OCI image cache with layer-level caching and COW rootfs cloning. `WAGGLE_IMAGE_CACHE_MAX_AGE` (default `168h`/7d) controls eviction. `WAGGLE_LOG_LEVEL` (0-5, default 0) sets libkrun verbosity; levels > 3 leak hypervisor internals.
 - **Layered images**: Runtime images (python/node/shell) inherit from `images/base/` via `ARG BASE_IMAGE`. Build base first: `task build-image-base`. All runtime image tasks depend on it automatically.
 - **MCP error handling has two paths**: Return `mcp.NewToolResultError("msg"), nil` for user-facing errors (bad input, not found). Return `nil, err` only for internal server failures. Mixing these up breaks the MCP protocol.

Taskfile.yaml

@@ -17,7 +17,7 @@ vars:
   BUILD_DATE:
     sh: date -u +"%Y-%m-%dT%H:%M:%SZ"
   PROPOLIS_VERSION:
-    sh: go list -m -f '{{.Version}}' github.com/stacklok/propolis
+    sh: go list -m github.com/stacklok/propolis | awk '{print $2}'
   HOST_ARCH:
     sh: uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/'
   HOST_OS:
@@ -35,8 +35,7 @@ vars:
     -X github.com/stacklok/waggle/pkg/infra/vm/runtimebin.Version={{.PROPOLIS_VERSION}}
 
 # Quick reference:
-#   task build            → Build waggle binary (pure Go, no CGO)
-#   task build-dev        → Build self-contained waggle with embedded propolis runtime
+#   task build            → Build self-contained waggle with embedded propolis runtime
 #   task build-dev-system → Build waggle + propolis-runner from system libkrun
 #   task fetch-runtime    → Download pre-built propolis runtime from GitHub Release
 #   task fetch-firmware   → Download pre-built propolis firmware from GitHub Release
@@ -51,38 +50,20 @@ tasks:
       - task --list
 
   build:
-    desc: Build the waggle binary
-    deps: [build-init]
+    desc: Build self-contained waggle with embedded propolis runtime
+    deps: [build-init, fetch-runtime, fetch-firmware]
+    env:
+      CGO_ENABLED: "0"
     cmds:
       - mkdir -p {{.BUILD_DIR}}
-      - CGO_ENABLED=0 go build -ldflags "{{.LDFLAGS}}" -o {{.BUILD_DIR}}/{{.BINARY_NAME}} {{.MAIN_PACKAGE}}
+      - go build -tags embed_runtime -ldflags "{{.LDFLAGS_EMBED}}" -o {{.BUILD_DIR}}/{{.BINARY_NAME}} {{.MAIN_PACKAGE}}
     sources:
       - ./**/*.go
       - go.mod
       - go.sum
     generates:
       - '{{.BUILD_DIR}}/{{.BINARY_NAME}}'
 
-  build-dev:
-    desc: Build self-contained waggle with embedded propolis runtime
-    platforms: [linux]
-    deps: [build-init, fetch-runtime, fetch-firmware]
-    env:
-      CGO_ENABLED: "0"
-    cmds:
-      - mkdir -p {{.BUILD_DIR}}
-      - go build -tags embed_runtime -ldflags "{{.LDFLAGS_EMBED}}" -o {{.BUILD_DIR}}/{{.BINARY_NAME}} {{.MAIN_PACKAGE}}
-
-  build-dev-darwin:
-    desc: Build self-contained waggle with embedded propolis runtime (macOS)
-    platforms: [darwin]
-    deps: [build-init, fetch-runtime, fetch-firmware]
-    env:
-      CGO_ENABLED: "0"
-    cmds:
-      - mkdir -p {{.BUILD_DIR}}
-      - go build -tags embed_runtime -ldflags "{{.LDFLAGS_EMBED}}" -o {{.BUILD_DIR}}/{{.BINARY_NAME}} {{.MAIN_PACKAGE}}
-
   build-dev-system:
     desc: Build waggle + propolis-runner from system libkrun (requires libkrun-devel)
     platforms: [linux]