container: set DENO_CERT alongside SSL_CERT_FILE for Deno CA trust (#16)

Deno does not respect SSL_CERT_FILE and requires its own DENO_CERT env
var to trust custom CA certificates. Without this, Deno-based tools
(e.g. linear-cli) fail with certificate errors when the gateway's MITM
CA is in use.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sargunv

src/container/index.ts

@@ -89,6 +89,8 @@ export class ContainerClient {
       const combinedPath = buildCombinedCaBundle(config.caCertificate);
       if (combinedPath) {
         args.push("-e", "SSL_CERT_FILE=/tmp/onecli-combined-ca.pem");
+        // DENO_CERT: Deno does not respect SSL_CERT_FILE, it has its own env var
+        args.push("-e", "DENO_CERT=/tmp/onecli-combined-ca.pem");
         args.push("-v", `${combinedPath}:/tmp/onecli-combined-ca.pem:ro`);
       }
     }