spawn_server also backs _subprocess_compat.bounded_probe_run (git probes, PowerShell/tasklist scans, the update venv probe) and the scrub overrode an explicit env= too, so every probe lost *_TOKEN/*_API_KEY/PASSWORD* (GH_TOKEN for a gh credential helper, HF_TOKEN for a gated pull). Apply server_child_env in supervisor._spawn and leave spawn_server's caller environment untouched.