land #398: step up bare env/printenv/export/declare to AUTH pre-execution
Your AI's guard dog to stop it from going rogue.
Brought to you by:
doberman
Originally created by: fu351
Lands [#398] with the author's commits unchanged (@QY-25123 keeps authorship; the PR flips to Merged when this lands). Additions: a merge of current main resolving two prose conflicts — the CHANGELOG anchor, and the README control-plane paragraph, where the branch carried a pre-#425 copy saying the Codex hook installer was still manual; kept main's updated wording plus the branch's new env-dump limitations bullet. No code differences from [#398].
Ticket changed by: fu351