Create targets for generate and embed, replace SKIP_APPS with WITH_APPS

Signed-off-by: Émile Ré <emile@getprobo.com>

contrib/claude/sandbox.md

@@ -17,10 +17,6 @@ Use a sandbox when you need to:
 # Start an existing sandbox
 ./contrib/lima/sandbox.sh start
 
-# Build and start the app (probo-stack starts automatically on boot)
-./contrib/lima/sandbox.sh exec -- make build
-./contrib/lima/sandbox.sh exec -- sudo systemctl start probod probo-console probo-trust
-
 # Get the VM IP and service URLs
 ./contrib/lima/sandbox.sh status
 
@@ -38,14 +34,14 @@ Use a sandbox when you need to:
 
 After `sandbox.sh status`, use the VM IP to access services from the host:
 
-| Service | URL |
-|---|---|
-| Console | `http://<vm-ip>:5173` |
-| Trust | `http://<vm-ip>:5174` |
-| API | `http://<vm-ip>:8080` |
-| Grafana | `http://<vm-ip>:3001` |
-| Mailpit | `http://<vm-ip>:8025` |
-| Keycloak | `http://<vm-ip>:8082` |
+| Service    | URL                         |
+| ---------- | --------------------------- |
+| Console    | `http://<vm-ip>:5173`       |
+| Trust      | `http://<vm-ip>:5174`       |
+| API        | `http://<vm-ip>:8080`       |
+| Grafana    | `http://<vm-ip>:3001`       |
+| Mailpit    | `http://<vm-ip>:8025`       |
+| Keycloak   | `http://<vm-ip>:8082`       |
 | PostgreSQL | `psql -h <vm-ip> -U probod` |
 
 ## Auto-generated configuration
@@ -74,12 +70,12 @@ This file is sourced during provisioning before `probod-bootstrap` runs. Any var
 
 The sandbox provisions four systemd services:
 
-| Service | Description | Starts on boot |
-|---|---|---|
-| `probo-stack` | Docker Compose stack (Postgres, SeaweedFS, Keycloak, etc.) | Yes |
-| `probod` | Probo API server (depends on `probo-stack`) | No |
-| `probo-console` | Console frontend dev server | No |
-| `probo-trust` | Trust frontend dev server | No |
+| Service         | Description                                                | Starts on boot |
+| --------------- | ---------------------------------------------------------- | -------------- |
+| `probo-stack`   | Docker Compose stack (Postgres, SeaweedFS, Keycloak, etc.) | Yes            |
+| `probod`        | Probo API server (depends on `probo-stack`)                | No             |
+| `probo-console` | Console frontend dev server                                | No             |
+| `probo-trust`   | Trust frontend dev server                                  | No             |
 
 `probo-stack` starts automatically when the VM boots. `probod`, `probo-console`, and `probo-trust` must be started manually after building.