Test: disable AWF sandbox to bypass api-proxy gpt-5.5 routing issue

The AWF api-proxy in firewall v0.25.40 collapses Copilot traffic to a single endpoint, which appears to break copilot-cli's /responses-API routing negotiation and blocks newer models like gpt-5.5. Disabling the agent sandbox lets copilot connect directly to api.githubcopilot.com, matching how the original (non-gh-aw) module-cleanup workflow ran successfully with gpt-5.5.

Author: trask