chore: capture all the envelopes

[bitsandfoxes]

do not merge. this is just harvesting envelopes.

#skip-changelog

[sentry-warden]

SENTRY_AUTH_TOKEN written into uploaded Android capture artifacts

On CI runs with the Sentry secret available, Android's captured upload-proguard request metadata includes the Bearer token and is uploaded in the symbols-android-* artifact, allowing artifact readers to recover the credential. Redact authorization headers before writing capture metadata or exclude the metadata files from the artifact.

Evidence

• .github/workflows/test-build-android.yml starts envelope-capture-server.py with output under test/IntegrationTest/symbols/android-${{ env.UNITY_VERSION }} and always uploads test/IntegrationTest/symbols/ as an artifact.
• CliConfiguration reads SENTRY_AUTH_TOKEN and sets cliOptions.Auth; SentryCli.CreateSentryProperties writes that value as auth.token, which sentry-cli uses for build-time uploads.
• test/Scripts.Integration.Test/Editor/Builder.cs enables Android debug and release minification, while DebugSymbolUpload registers upload-proguard for minified builds.
• The capture server only special-cases /chunk-upload/ and /assemble/; the proguard POST reaches the generic handler, which writes dict(self.headers) into .meta.json and index.jsonl beneath the artifact output.

Also found at 1 additional location

• .github/workflows/ci.yml:379-382

_{Identified by Warden · security-review · 4BH-LDB}