When Claude Code runs in a cloud container, every subprocess it spawns — curl, gh, python, kubectl — needs to reach external services. But the container sits behind an organization's security perimeter. The org needs to inject credentials (API keys, auth headers) into outbound HTTPS requests, log traffic for compliance, and block unauthorized...