Why: CI runners lack bwrap, so the real RDM binary refuses to start under the sandbox fail-closed policy (run 2607: serve exits right after launch); the product provides RDM_DISABLE_EXEC_TOOLS as the top-level fallback and lifecycle semantics under test are unchanged. Evidence: local rerun with the env set stays green. Impact: tests only.