Egress proxy

Optional outbound credential-injection firewall for remote terminal sandboxes. The sandbox only ever holds opaque proxy tokens; real API keys never leave the host.

• iron-proxy — single-binary TLS-intercepting proxy from ironsh/iron-proxy, lazy-installed and managed by hermes egress.