sandboxing

Copilot CLI 1.0.92 keeps ambient GITHUB_TOKEN out of sandboxed shells

Copilot CLI 1.0.92 strips ambient GITHUB_TOKEN from sandboxed shells while Git can use masked credentials when sandbox authentication is enabled.