cmd/worker: document that /tmp/modules is needed for shell debugging

Otherwise, creating a sandbox manually will fail since /tmp/modules need
to exist in order to be mounted in the sandbox. This is not a problem in
practice as we download a module before starting the sandbox.

Change-Id: Icbd4bed9f941d0a72289c41c4bf32b84dc476a99
Reviewed-on: https://go-review.googlesource.com/c/pkgsite-metrics/+/479123
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
Reviewed-by: Jonathan Amsterdam <jba@google.com>
diff --git a/cmd/worker/Dockerfile b/cmd/worker/Dockerfile
index f484ce9..1d68b9d 100644
--- a/cmd/worker/Dockerfile
+++ b/cmd/worker/Dockerfile
@@ -26,6 +26,9 @@
 # The worker binary and related files live here.
 RUN mkdir /app
 
+# When debugging the sandbox manually, run this as well:
+# RUN mkdir /tmp/modules
+
 # Where binaries live.
 # Mapped by the sandbox config to the same place inside the sandbox.
 # If you change this, you must also edit the bind mount in config.json.commented.