Fix desktop Cloudflare Access remote connections

[wizzoapp]

Summary

• keep desktop Cloudflare Access interactive sign-in alive when Electron reports redirect-class loadURL interruptions while navigating to the Access login page
• preserve Cloudflare Access JWT/service-token fields from pairing URL fragments and explicit Add Environment fields
• install/clear Cloudflare Access transport credentials through the desktop IPC layer so HTTP, WebSocket ticketing, SSE, and socket handshakes use the intended credential without stale header/cookie bleed

Proof

• Factory gate on 1ce9f4322: vp run typecheck, vp check, Codex gpt-5.5 autoreview clean
• Focused tests: desktop Cloudflare Access IPC, shared remote URL parsing, client-runtime onboarding/resolver, web settings parser
• Local launch proof: final built staged app launched under Xvfb via repo Electron and passed scripts/desktop-launch-smoke.mjs
• Cloudflare Access redirect proof: final built app invoked window.desktopBridge.authenticateCloudflareAccess({ host: "https://oc.agriffiths.dev/" }), auth renderer reached https://agriffiths.cloudflareaccess.com/cdn-cgi/access/login/..., and IPC state stayed pending
• Superseded PR Fix desktop Cloudflare Access remote connections #86 CI on the same head passed: Check, Test, Release Smoke, Desktop Linux Package Smoke, Desktop Windows Package Smoke

Notes

• Supersedes Fix desktop Cloudflare Access remote connections #86 because Codex review stopped attaching to fresh pushes on that PR after multiple review cycles.
• Local Linux electron-builder --target dir hung twice after writing only the raw Electron runtime; the real packaged artifact gate is covered by CI Linux/Windows package smoke.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1ce9f43224

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[adamfgr]

Auto-approved by wizzo-approve: all policy conditions verified against HEAD 1564755.