Function cloud_subscriber_disabled_from_env 

fn cloud_subscriber_disabled_from_env() -> bool

Should CloudSubscriber::init_global be skipped this run?

Presence-based, matching the AGENTMUX_DEV/AGENTMUX_TRAY idiom elsewhere in this codebase. See the call site’s doc comment for why skipping this matters: init_global triggers a real, synchronous OS-keychain read almost immediately, which macOS gates behind an interactive consent prompt for any process whose code signature isn’t on the target credential’s trusted-signer ACL — exactly the case for an ad-hoc/dev-signed target/debug binary spawned by an integration test.