Using aspire inside Docker sandbox

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Is your feature request related to a problem? Please describe the problem.

My application is in Python and uses Aspire for telemetry.

I am trying to use Docker "sandbox" technology to run (claude/copilot) agents `sbx run coplot`. However, aspire is not able to run, DCP is rejecting it.

`DOTNET_ROOT=/home/agent/.dotnet DCP_IP_VERSION_PREFERENCE=IPv4 SSL_CERT_DIR="/home/agent/.aspnet/dev-certs/trust:/usr/lib/ssl/certs" /home/agent/.aspire/bin/aspire start --debug`

```
/home/agent/.aspire/logs/cli_20260622T132700678_detach-child_1ac73169f2314c30ac3b839cc2f6145a.log:[2026-06-22 13:27:09.908] [INFO] [AppHost] --->
│ System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
│ /home/agent/.aspire/logs/cli_20260622T141457315_detach-child_9a2b3b8246454d7eb47337dc8b95badc.log:[2026-06-22 14:15:06.910] [INFO] [AppHost] --->
│ System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
│ /home/agent/.aspire/logs/cli_20260622T141457315_detach-child_9a2b3b8246454d7eb47337dc8b95badc.log:[2026-06-22 14:15:06.910] [INFO] [AppHost] --->
│ System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
│ /home/agent/.aspire/logs/cli_20260622T141457315_detach-child_9a2b3b8246454d7eb47337dc8b95badc.log:[2026-06-22 14:15:06.934] [INFO] [AppHost] --->
│ System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
```

and

```
│ [2026-06-22 14:15:06.934] [INFO] [AppHost] ---> System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided
│ RemoteCertificateValidationCallback.
│ [2026-06-22 14:15:06.934] [INFO] [AppHost] at System.Net.Security.SslStream.SendAuthResetSignal(ReadOnlySpan`1 alert, ExceptionDispatchInfo exception)
│ [2026-06-22 14:15:06.934] [INFO] [AppHost] at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
│ [2026-06-22 14:15:06.934] [INFO] [AppHost] at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken
│ cancellationToken)
│ [2026-06-22 14:15:06.934] [INFO] [AppHost] at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean
│ async, Stream stream, CancellationToken cancellationToken)
│ [2026-06-22 14:15:06.934] [INFO] [AppHost] --- End of inner exception stack trace ---
```

Copilot's own diagnosys is "The DCP TLS issue seems to be a second sandbox restriction — the RemoteCertificateValidationCallback rejection happens because DCP generates a self-signed cert at runtime and the AppHost's Kubernetes client refuses it."

### Describe the solution you'd like

Can there be a way to run aspire with Docker sandbox ?

### Additional context

_No response_

Start by reproducing the reported command, `aspire start --debug`, inside the Docker sandbox and inspect the DCP/AppHost logs for the TLS handshake failure. Trace how the runtime certificate is generated and validated; done means an Aspire application can run in the sandbox without the DCP certificate being rejected.

Written by the indexing model from the issue text.