fix(security): route .env writes through host agent, restore :ro mount

fix(security): route .env writes through host agent, restore :ro mount #1984