Programmatic AI agent runtime with pluggable providers and sandboxed virtual infrastructure