fix(zhulan): keep SSH Match directives portable

server-tools/zhulan-remote-cell/deploy/install-codex-remote-ssh.sh

@@ -87,7 +87,6 @@ Match User zhulan-codex
     X11Forwarding no
     PermitTunnel no
     PermitTTY yes
-    PermitUserEnvironment no
 EOF
 chmod 0644 "$SSHD_DROPIN.tmp"
 mv "$SSHD_DROPIN.tmp" "$SSHD_DROPIN"

server-tools/zhulan-remote-cell/tests/test_codex_remote.py

@@ -70,6 +70,7 @@ class CodexRemoteContractTest(unittest.TestCase):
         self.assertIn('"$REMOTE_HOME/.codex/AGENTS.md"', installer)
         self.assertIn("'/.zhulan/'", installer)
         self.assertIn("AllowTcpForwarding no", installer)
+        self.assertNotIn("PermitUserEnvironment no", installer)
         self.assertIn("central_push_credentials\": false", installer)
         self.assertNotIn("NOPASSWD", installer)