harbor task images build with strictly per-directory contexts; the separate verifier cannot COPY from environment/
harbor builds environment/ and tests/ images with separate per-dir contexts and never injects tests/ at runtime; verifier images must self-contain the pristine tree (clone the pinned sha again, or duplicate the files).
@ideal-rain-33