fix(security): allow process.env.DEBUG proxy writes (#269)

Set DEBUG directly on process.env to avoid Node rejecting the proxy receiver descriptor, while preserving the existing blocking behavior for every other environment key.