Git worktrees are not an isolation boundary for coding agents