fix: apply runtime telemetry settings to web and remote clients

DS Web and remote Agent launch paths omitted shared telemetry opt-out settings. Reuse one environment definition for local launches, remote runtime profiles, and the remote model bridge helper while preserving existing update controls and user-requested networking.

Validation: 16 focused tests passed at commit time. Prior local real-model validation passed; modified Agent real-Host validation and background network monitoring remain outstanding.

Release note: 补齐 DS Web 与远程 Runtime 启动时的遥测关闭配置，保留现有自动更新关闭设置，不影响模型、MCP 和用户主动联网请求。

src/agent-daemon/model-bridge-helper.ts

@@ -1,3 +1,4 @@
+import { runtimePrivacyEnvironment } from '../shared/runtime-privacy-environment'
 import { randomBytes, randomUUID } from 'node:crypto'
 import { spawn as nodeSpawn } from 'node:child_process'
 import { mkdtemp, writeFile, rm } from 'node:fs/promises'
@@ -931,7 +932,9 @@ function credentialFreeHelperEnvironment(
     'XDG_STATE_HOME'
   ] as const
   const environment: NodeJS.ProcessEnv = {
+        ...runtimePrivacyEnvironment,
     OPENCODE_CONFIG_CONTENT: config,
+
     OPENCODE_ENABLE_QUESTION_TOOL: 'true'
   }
   for (const name of allowed) {