You can't use a worktree without write access to the shared object database. You can use worktrees, or you can containerize your agents, but you can't do both.