Route exec-server HTTP through configured proxy policy (#35023)

## Why

Delegated HTTP requests need to honor the same outbound proxy policy as the
Codex process that starts the exec server.

## What changed

- Pass the configured `HttpClientFactory` through local and remote exec-server
  startup and use route-aware client pools for delegated HTTP and local MCP
  requests.
- Preserve per-request timeouts and follow-or-stop redirect behavior while
  keeping request URLs and sensitive response headers out of diagnostics.

## Testing

- Cover configured system-proxy routing across the exec-server transport.
- Cover both redirect policies and verify that success and failure logs do not
  expose request or response secrets.

GitOrigin-RevId: 4af6aec1d265c4db62dfcb6e1fb076fb31736137

codex-rs/http-client/src/route_aware_client_pool.rs

@@ -308,6 +308,21 @@ impl RouteAwareClientPool {
         )
     }
 
+    /// Creates a no-redirect ChatGPT Cloudflare-cookie pool without request diagnostics.
+    pub fn with_chatgpt_cloudflare_cookies_without_redirects_or_request_logging(
+        http_client_factory: HttpClientFactory,
+        route_class: ClientRouteClass,
+    ) -> Self {
+        Self::with_builder(
+            http_client_factory,
+            route_class,
+            HttpClientBuilder::new()
+                .with_chatgpt_cloudflare_cookie_store()
+                .without_redirects()
+                .without_request_logging(),
+        )
+    }
+
     /// Creates a ChatGPT Cloudflare-cookie pool without URL or response-header diagnostics.
     pub fn with_chatgpt_cloudflare_cookies_without_request_logging(
         http_client_factory: HttpClientFactory,