#3382 chore(devel): enable CLI telemetry in the traced sandbox kit

The traced-Claude sandbox kit (devel/sandbox-kit) set DO_NOT_TRACK=1 and did not allow egress to the telemetry endpoint, so CLI usage from sessions run inside the sandbox was never reported.

This removes the DO_NOT_TRACK environment variable from the kit and adds crb.chainloop.dev:443 to the kit's network allow rules, so those sessions report usage like any other CLI invocation. The host is deliberately kept out of NO_PROXY, since telemetry is plain HTTPS and does not need the proxy bypass that the gRPC endpoints require.

AI disclosure: this change was produced with the assistance of Claude Code.