fix: bwrap ro-mounts `$agent/blocks` properly now