chore(lint): enforce the session-env-snapshot rule for std::env::vars_os

Disallow fresh process-env snapshots in Vite task crates so planning, execution, IPC, and cache validation keep using the session's captured env map. Session::init remains the one sanctioned bootstrap reader.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: wan9chi

.clippy.toml

@@ -8,6 +8,7 @@ disallowed-methods = [
   { path = "str::replace", reason = "To avoid memory allocation, use `cow_utils::CowUtils::cow_replace` instead." },
   { path = "str::replacen", reason = "To avoid memory allocation, use `cow_utils::CowUtils::cow_replacen` instead." },
   { path = "std::env::current_dir", reason = "To get an `AbsolutePathBuf`, Use `vite_path::current_dir` instead." },
+  { path = "std::env::vars_os", reason = "Read process env only in `Session::init`, then use the session env snapshot downstream." },
   { path = "std::thread::sleep", reason = "Use proper synchronization (channels, condvars, etc.) instead of sleeping. Sleep is only acceptable for intentional user-facing delays (e.g. animations, debouncing)." },
   { path = "tokio::time::sleep", reason = "Use proper synchronization (channels, signals, etc.) instead of sleeping. Sleep is only acceptable for intentional user-facing delays (e.g. animations, debouncing)." },
 ]

crates/vite_task/src/session/mod.rs

@@ -196,6 +196,10 @@ impl<'a> Session<'a> {
     /// if workspace initialization fails.
     #[tracing::instrument(level = "debug", skip_all)]
     pub fn init(config: SessionConfig<'a>) -> anyhow::Result<Self> {
+        #[expect(
+            clippy::disallowed_methods,
+            reason = "Session::init is the only place that bootstraps the session env snapshot"
+        )]
         let envs = std::env::vars_os()
             .map(|(k, v)| (Arc::<OsStr>::from(k.as_os_str()), Arc::<OsStr>::from(v.as_os_str())))
             .collect();