Drop the docker_environment, hermes_subprocess_env and served-profile copies of the same fold check; the passthrough-registration and local-scrub tests exercise the seams production reads, and the forward_env/extra_args refusal is covered by the collision guard tests already in test_docker_environment.py once the shared helper folds.