Package engine routes a command to drop/host/container and executes it,
independent of any transport (MCP, CLI). Output is written to the caller's
io.Writers.
err is non-nil only on host-execution infrastructure failure. All other
outcomes (drop, container-not-configured, validation failure, container
runner error) write a message to req.Stderr and return err == nil with a
non-zero exit code.