fix(workloadmanager): add comments to force CI build cache invalidation

The Docker build on CI uses --mount=type=cache for the Go build cache.
Stale cache entries from a prior broken push were causing a phantom
'duplicate field name workloadName' error even though the source file
was correct. Adding explanatory comments to the sandboxEntry literals
in buildSandboxByAgentRuntime and buildSandboxByCodeInterpreter changes
the file hash, forcing the Go toolchain to recompile the package from
scratch and bypass the poisoned cache.

The comments also document why WorkloadKind/WorkloadName are set here.

Signed-off-by: KinshukSS2 <kinshuk380@gmail.com>

Author: KinshukSS2

pkg/workloadmanager/workload_builder.go

@@ -129,6 +129,9 @@ func loadPublicKeyFromSecret(clientset kubernetes.Interface) error {
 	return nil
 }
 
+// buildSandboxParams holds all parameters needed to construct a Sandbox object.
+// workloadName carries the name of the AgentRuntime or CodeInterpreter template
+// that owns the sandbox, used to populate route-identity validation metadata.
 type buildSandboxParams struct {
 	namespace      string
 	workloadName   string
@@ -292,6 +295,8 @@ func buildSandboxByAgentRuntime(namespace string, name string, ifm *Informers) (
 	}
 	buildParams.idleTimeout = idleTimeout
 	sandbox := buildSandboxObject(buildParams)
+	// WorkloadKind and WorkloadName record the route-identity of the owning workload
+	// so the router can validate session reuse against the correct target.
 	entry := &sandboxEntry{
 		Kind:         types.SandboxKind,
 		WorkloadKind: types.AgentRuntimeKind,
@@ -351,6 +356,8 @@ func buildSandboxByCodeInterpreter(namespace string, codeInterpreterName string,
 		idleTimeout = codeInterpreterObj.Spec.SessionTimeout.Duration
 	}
 
+	// WorkloadKind and WorkloadName record the route-identity of the owning workload
+	// so the router can validate session reuse against the correct target.
 	sandboxEntry := &sandboxEntry{
 		Kind:         types.SandboxKind,
 		WorkloadKind: types.CodeInterpreterKind,