Claude Duet runs on a cloud VM, checks your apps every few hours and asks before anything irreversible. How it works and when a DIY agent wins.