security: block cloud provider credentials and git credential prompts in subprocesses (salvage of #7990)

[wesleysimplicio]

Salvage of abandoned PR #7990 (27 days stale, original author @SHL0MS).

Problem

Two gaps in subprocess environment sanitization:

1. Cloud provider credentials not blocked

_build_provider_env_blocklist() blocked Hermes-managed API keys but not cloud provider credentials. Agent-spawned subprocesses could silently access:

• AWS (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, AWS_SECURITY_TOKEN)
• Azure (AZURE_CLIENT_SECRET, AZURE_CLIENT_ID, AZURE_TENANT_ID)
• GCP (GOOGLE_APPLICATION_CREDENTIALS)
• Infrastructure (KUBECONFIG, DOCKER_HOST, DOCKER_CERT_PATH, SSH_AUTH_SOCK, GPG_AGENT_INFO)
• Package registries (NPM_TOKEN, PYPI_TOKEN)

2. GIT_TERMINAL_PROMPT not disabled

Git subprocesses could prompt for credentials, blocking execution or leaking timing information.

Fix

# 14 new entries in _build_provider_env_blocklist()
"AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_SECURITY_TOKEN",
"AZURE_CLIENT_SECRET", "AZURE_CLIENT_ID", "AZURE_TENANT_ID",
"GOOGLE_APPLICATION_CREDENTIALS", "KUBECONFIG",
"DOCKER_HOST", "DOCKER_CERT_PATH",
"NPM_TOKEN", "PYPI_TOKEN",
"SSH_AUTH_SOCK", "GPG_AGENT_INFO",

# New hardening dict applied in both env-building paths
_GIT_HARDENING_VARS = {"GIT_TERMINAL_PROMPT": "0"}

Applied in both _make_run_env() (the execute() path) and _sanitize_subprocess_env() (the subprocess delegation path) so neither code path misses it.

Tests

New test classes in tests/tools/test_local_env_blocklist.py using the existing _run_with_env() harness:

• TestCloudCredentialBlocklist: AWS/Azure/GCP+infra blocked, constant subset check
• TestGitHardeningVars: GIT_TERMINAL_PROMPT=0 set, not overrideable by OS env

Stash-verify: 6 tests fail without fix, all 24 pass with it.

Differences from #7990

• Applies _GIT_HARDENING_VARS in _make_run_env() too (original only patched _sanitize_subprocess_env())
• Adds regression tests the original PR was missing
• Applies cleanly to current main (context-line drift after 27 days)

[Copilot]

Pull request overview

This PR hardens subprocess environment sanitization to prevent inadvertent credential leakage (cloud provider creds + git credential prompts) and adds Portuguese (Brazil) documentation/i18n assets to the website/docs.

Changes:

• Extend the local subprocess env blocklist to strip common cloud/infra credentials and force-disable GIT_TERMINAL_PROMPT for subprocesses.
• Add regression tests covering the new blocklisted variables and the git prompt hardening (via the LocalEnvironment.execute() path).
• Add pt-BR as a Docusaurus locale plus new pt-BR docs/README entries.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tools/environments/local.py	Adds cloud credential env var blocklist entries and forces GIT_TERMINAL_PROMPT=0 in subprocess env construction paths.
tests/tools/test_local_env_blocklist.py	Adds tests ensuring cloud/infra env vars are stripped and git terminal prompt is forced off (execute path).
website/docusaurus.config.ts	Enables pt-BR locale in Docusaurus configuration.
website/i18n/pt-BR/docusaurus-plugin-content-docs/current/user-guide/features/tool-gateway.md	Adds pt-BR Tool Gateway documentation page.
website/i18n/pt-BR/docusaurus-plugin-content-docs/current/user-guide/features/image-generation.md	Adds pt-BR Image Generation documentation page.
README.md	Adds pt-BR README badge/link.
README.zh-CN.md	Adds pt-BR README badge/link.
README.pt-BR.md	Adds a Portuguese (Brazil) README.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[wesleysimplicio]

Closing voluntarily — heard feedback from @teknium1 that the salvage pattern is creating PR-spam noise. Stepping back to reviews and direct fixes for issues without an existing PR. Apologies for the volume.