fix: add missing proxy support to requestImages() (guacsec#447)

* fix: add missing proxy support to requestImages()

requestImages() was the only request function in analysis.js that did
not call addProxyAgent(), causing image analysis requests to bypass
the configured HTTP proxy. This wraps the fetch options with
addProxyAgent(options, opts) following the same pattern used by
requestStack, requestComponent, requestStackBatch, and validateToken.

Implements TC-3922

Assisted-by: Claude Code

* test: replace proxy integration tests with addProxyAgent unit tests

The proxy tests claimed to "verify agent is set correctly" but only
asserted on the response body — the agent was never actually checked.

Replace with direct unit tests for addProxyAgent() that verify:
- HttpsProxyAgent is created with the correct proxy URL
- Agent is set for both HTTP and HTTPS proxy URLs
- Agent is set when proxy comes from environment variable
- No agent is set when no proxy is configured

Also fix MSW v2 handler format in requestImages integration tests
(use HttpResponse.json() instead of the v1 res(ctx.json()) API).

Remove requestStack proxy integration tests that were broken due to
fake file paths — the proxy logic is now properly covered by the
addProxyAgent unit tests.

Implements TC-3922

Assisted-by: Claude Code

* fix: add missing proxy support to requestImages() and restore analysis tests

Add addProxyAgent() call to requestImages(), which was the only request
function missing proxy support. Restore and fix all analysis tests that
were excluded from CI via --grep --invert: migrate MSW v1 to v2 API,
fix stale header/option names (ex-provider-1-token → trust-da-token),
add temp file setup for requestStack/requestComponent tests, and add
addProxyAgent unit tests with actual agent verification.

Implements TC-3922

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: ruromero

package.json

@@ -38,7 +38,7 @@
 		"lint": "eslint src test --ext js",
 		"lint:fix": "eslint src test --ext js --fix",
 		"test": "c8 npm run tests",
-		"tests": "mocha --config .mocharc.json --grep \".*analysis module.*\" --invert",
+		"tests": "mocha --config .mocharc.json",
 		"tests:rep": "mocha --reporter-option maxDiffSize=0 --reporter json > unit-tests-result.json",
 		"pretest": "cp node_modules/tree-sitter-requirements/tree-sitter-requirements.wasm src/providers/tree-sitter-requirements.wasm && cp node_modules/tree-sitter-gomod/tree-sitter-gomod.wasm src/providers/tree-sitter-gomod.wasm",
 		"precompile": "rm -rf dist",

src/analysis.js

@@ -207,15 +207,17 @@ async function requestImages(imageRefs, url, html = false, opts = {}) {
 		finalUrl.searchParams.append('recommend', 'false');
 	}
 
-	const resp = await fetch(finalUrl, {
+	const fetchOptions = addProxyAgent({
 		method: 'POST',
 		headers: {
 			'Accept': html ? 'text/html' : 'application/json',
 			'Content-Type': CYCLONEDX_JSON_MEDIA_TYPE,
 			...getTokenHeaders(opts)
 		},
 		body: JSON.stringify(imageSboms),
-	})
+	}, opts)
+
+	const resp = await fetch(finalUrl, fetchOptions)
 
 	if (resp.status === 200) {
 		let result;