0e46c7cb33
Phase-2 Bird handle searches were still spawning Node without the injected AUTH_TOKEN/CT0 env. That left the search pipeline vulnerable to Chrome keychain prompts whenever a query drilled into X handles. Pass the popup-safe subprocess env through those handle searches and cover it with a regression test.