Remove the network proxy config wrapper

[jif-oai]

Why

NetworkProxyConfig only wrapped NetworkProxySettings in a single network field. That extra level made runtime callers repeat .network everywhere without representing a real boundary.

What changed

• move the managed-network fields directly onto NetworkProxyConfig
• collapse the matching partial-config wrapper
• update runtime callers and tests to use the direct fields
• keep the user-facing permissions/profile TOML layout unchanged

The internal serialized shape now matches the runtime type itself. This does not change managed-network behavior or the config.toml shape.

[jif-oai]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: efb3a03108

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".