fix: forward enterprise proxy and certificate settings

[mldangelo-oai]

Summary

• Forward HTTP_PROXY, HTTPS_PROXY, ALL_PROXY, NO_PROXY, SSL_CERT_FILE, REQUESTS_CA_BUNDLE, and NODE_EXTRA_CA_CERTS into the bundled MCP server.
• Allow enterprise proxy and custom-certificate configurations to reach both Node and Python scan components.

Stack

• Independent PR targeting main.
• Prerequisite for the pending 0.1.6 release in release: bump Codex Security to 0.1.6 #244; package version is unchanged.

Verification

• Parsed every bundled workbench Python module.
• Verified all 94 declared plugin payload files exist.
• Initialized a fresh private workbench SQLite database successfully.
• Passed Prettier for all 1 changed formatted files.
• The complete reconstructed sync passed 775 tests (5 platform/integration skips) and the installed-package smoke test.

[mldangelo-oai]

@codex review

Please review the exact current head 71187d5a3d6ab66cc0055f7841209353bbaceb52 and only this atomic PR's declared base-to-head diff.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Another round soon, please!

Reviewed commit: 71187d5a3d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Security review completed. No security issues were found in this pull request.

Reviewed commit: 71187d5a3d

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.