permission: add --allow-env flag for environment variable access control

[nabeel378]

Adds --allow-env permission flag to control access to environment
variables when the permission model is enabled (--permission).

Supported usage:

• --allow-env — grants access to all environment variables
• --allow-env=HOME,PATH — grants access only to specified variables

When --permission is enabled without --allow-env, all calls to
process.env will throw ERR_ACCESS_DENIED.

Fixes: #62424

[nodejs-github-bot]

Review requested:

• @nodejs/config
• @nodejs/gyp
• @nodejs/security-wg

[codecov]

Codecov Report

❌ Patch coverage is 92.06349% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.60%. Comparing base (58a8e1d) to head (cba1261).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
src/node_env_var.cc	87.09%	0 Missing and 4 partials ⚠️
src/permission/env_var_permission.cc	95.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62827      +/-   ##
==========================================
- Coverage   89.69%   89.60%   -0.09%     
==========================================
  Files         706      708       +2     
  Lines      218222   219199     +977     
  Branches    41768    42002     +234     
==========================================
+ Hits       195731   196422     +691     
- Misses      14411    14655     +244     
- Partials     8080     8122      +42     

Files with missing lines	Coverage Δ
lib/internal/process/permission.js	100.00% <100.00%> (ø)
src/env.cc	85.27% <100.00%> (-0.19%)	⬇️
src/node_options.cc	76.53% <100.00%> (+0.02%)	⬆️
src/node_options.h	97.98% <ø> (ø)
src/permission/env_var_permission.h	100.00% <100.00%> (ø)
src/permission/permission.cc	81.92% <100.00%> (+0.33%)	⬆️
src/permission/permission.h	100.00% <ø> (ø)
src/permission/env_var_permission.cc	95.00% <95.00%> (ø)
src/node_env_var.cc	82.08% <87.09%> (-0.13%)	⬇️

... and 35 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.