Summary

The onboarding wizard suggests pypi and npm presets, but package installation still fails with 403 errors inside the sandbox.

Problem

The current preset rules are not compatible with package-manager traffic patterns such as CONNECT tunneling. Users see green checkmarks during setup and only discover the preset is broken later.

Expected behavior

Suggested presets should enable the workflows they claim to support.

Acceptance criteria

• pip install succeeds after applying the pypi preset.
• npm install succeeds after applying the npm preset.
• Presets use the same access model already proven to work for GitHub if that is the correct fix.
• If a preset cannot support package-manager traffic safely, it should not be suggested during onboarding.