refactor: [Export Audit] Remove test-only re-exports from barrel modules (#3169)

* fix: remove test-only re-exports from barrel modules

Remove symbols from docker-manager.ts and host-iptables.ts barrels that
are only consumed by test files. Test files now import directly from
the source modules (host-env, compose-generator, container-lifecycle,
host-iptables-rules, host-iptables-network).

docker-manager.ts barrel: removed 19 test-only re-exports (AGENT_CONTAINER_NAME,
ACT_PRESET_BASE_IMAGE, MIN_REGULAR_UID, validateIdNotInSystemRange,
getSafeHostUid, getSafeHostGid, getRealUserHome, extractGhHostFromServerUrl,
readGitHubPathEntries, readGitHubEnvEntries, parseGitHubEnvFile,
mergeGitHubPathEntries, readEnvFile, subnetsOverlap, SslConfig, stripScheme,
generateDockerCompose, isAgentExternallyKilled, resetAgentExternallyKilled).

host-iptables.ts barrel: removed 2 test-only re-exports
(isValidPortSpec, cleanupFirewallNetwork).

Closes #3165
Closes #3166
Closes #3167

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: add --ignore-scripts to claude-code npm install in lock files

* fix: restore test coverage lost by barrel export removal

* chore: recompile all agentic workflows with post-processing

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Author: 3 people