style(sandbox): format child_env.rs after the RUSTC_WRAPPER fix

60ea7c223 on main fails cargo fmt --all --check in
crates/tui/src/child_env.rs, which fails hosted Lint. rustfmt only; no
behaviour change.

This push also carries: the extension-host boundary fix (e3f644aea), the
merge of #6715 (account choice, 23 of 23 hosted checks green on
98375f506) and the merge of main at 60ea7c223.

Verified on this tree (macOS, Rust 1.99): cargo fmt --all --check clean;
CI-policy clippy across the workspace exit 0; codewhale-tui lib tests
(extension host against the real Node host, plugins, command registry,
auth and credentials, task manager, conformance, fleet, child_env) 1339
passed, 0 failed, 2 ignored, run under a sealed temporary home;
codewhale-cli 483 passed; codewhale-localization 53 passed; all eight
Lint scripts pass, including the command-crate boundary check with and
without --baseline-ref origin/main. Linux and Windows left to hosted CI.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Signed-off-by: CodeWhale Bot <[email protected]>

crates/tui/src/child_env.rs

@@ -1364,9 +1364,9 @@ mod tests {
             OsString::from("seatbelt"),
         )]);
         assert!(
-            sandboxed
-                .iter()
-                .any(|(key, value)| normalize_key(key) == "CODEWHALE_SANDBOX" && value == "seatbelt"),
+            sandboxed.iter().any(
+                |(key, value)| normalize_key(key) == "CODEWHALE_SANDBOX" && value == "seatbelt"
+            ),
             "sandbox marker must survive"
         );
         assert!(