Codex cloud sandbox can't reach private npm registries
Cloud tasks fail at `npm ci` with ETIMEDOUT against our Artifactory registry. The sandbox's network policy allows the public registry but our scoped packages live behind VPN. Local Codex works fine; every cloud run dies at install.