Harden shared container execution under Windows/WSL disk and Docker load. container_action.py streams action status, logs, and lease markers through Docker without host scratch writes, retries transient requests within the lease, and preserves cancellation ownership. Update the macOS and Windows callers together, shorten Windows sandbox paths, mount repository-cache drives, and disable unsafe sandbox-directory reuse on Windows.

Extend shared Bazel RC resolution for imported configs and execution settings. Consolidate shell-test invocation in buildscripts/tests/shell.py and preserve complete Git history on Windows without losing staged patch edits.

Validation: three standalone Bazel test targets, 220 wrapper unit tests, the Git-history shell regression, and bazel run format passed.

Extracted from #63670. Merge in order: #66297 (execution infrastructure), #66298 (toolchains/artifacts), then #66113 (Windows defaults and Evergreen rollout). Epic: DEVPROD-33617.