feat(proxy): add redeem_phantoms for by-value nonce redemption

[kipz]

Linked Issue

Closes #1468

Summary

Adds redeem_phantoms to a custom_credentials route — a list of broker
credential names the route resolves from a caller-presented phantom in a request
header (by-value / proof-of-possession). A non-empty list forces interception for
the route's host; resolution is gated by credential name (not value); it composes
with a managed credential_key/auth or stands alone. JWT-shaped phantoms are
whole-token replaced (anchored to the parsed nonce) so a real JWT stays 3 segments.
The broker gains a name-gated resolve_nonce_for_credentials (per-nonce name map)
and the NonceResolver trait gains a resolve_for_credentials method (default None).

Stacked — do not merge until #1443 lands in main:

• fix(proxy): add authenticated WebSocket tunneling for CONNECT/TLS-intercept routes #1443 (WebSocket tunnelling) — needed by the build_websocket_upstream_request call site.

Test Plan

make ci clean. New unit tests: shape-aware JWT resolution (3-segment result),
opaque substring replacement, route-authoritative name gate + fail-closed,
name-vs-value across per-audience overwrites, raw-value reissue relabel, a
multibyte-boundary panic regression, and profile validation (composes with
credential_key; rejected with aws_auth/spiffe; empty-name rejected).

Checklist

• An issue exists and is linked above
• All commits are signed-off, using DCO
• All new code follows the project's coding standards (CLAUDE.md) and is covered by tests
• Public-facing changes are paired with documentation updates
• Release note has been added to CHANGELOG.md if needed

Agent Disclosure

Generated by an AI agent. Reuses the existing NonceResolver and CONNECT intercept
dispatch; no new resolver trait, URI scheme, or consumer class. Files changed:
crates/nono-proxy/src/{config,route,server,token,tls_intercept/{handle,h2_forward}}.rs,
crates/nono-cli/src/{network_policy,profile/mod,proxy_runtime,tool-sandbox/token_broker}.rs,
crates/nono-cli/data/nono-profile.schema.json.

Agent Compliance Check

• I am not prohibited from contributing under this policy
• An issue already exists (Route-gated by-value resolution of caller-presented capture nonces #1468)
• I disclosed that I am an agent in the issue discussion
• I described my intent and approach in the issue discussion
• I reviewed repository coding and security rules for the affected area
• I provided required attribution for reused or adapted code
• I did not use forbidden patterns such as unwrap/expect
• I used NonoError where required
• I validated and canonicalized all relevant paths
• This PR matches the approved or disclosed issue scope

[github-actions]

PR Review Summary

Size

Metric	Value
Lines added	+953
Lines removed	-81
Total changed	1034
Classification	Large (> 300 lines)

Affected crates

• crates/nono-proxy — downstream consumers depend on this crate. API or behaviour changes will affect external callers; treat any breaking change with extra scrutiny.
• crates/nono-cli — CLI changes. Verify argument parsing, flag documentation, and UX behaviour across supported platforms.

Blast radius — Moderate

This PR touches: source code,configuration / policy files

---

_{Updated automatically on each push to this PR.}

[nogent-nolabs-ai]

nogent code review

No blocking issues; 0 suggestions.

_{Automated code + security review. CI already covers clippy, rustfmt, tests, cargo-audit and commit-lint.}

[lukehinds]

@kipz , this one needs a bit of a rebase , a few network PRs landed before