feat(infra): route Gemini WS through SOCKS5 proxy (WARP)

- Add socks-proxy-agent dependency
- Add resolveGeminiProxyAgent() helper reading GEMINI_PROXY_URL env
- Apply agent to T1 and T2 Gemini WS factory defaults
- No proxy when GEMINI_PROXY_URL is unset (local dev unchanged)
- Tests: 311/311 green

src/lib/geminiLiveT1.ts

@@ -30,6 +30,7 @@ import {
   isEndSignal,
   parseAudioChunk,
   reconstructTranscript,
+  resolveGeminiProxyAgent,
   tryParseGeminiJson,
   type TranscriptEntry,
   type WebSocketLike,
@@ -203,9 +204,14 @@ export function openGeminiLiveT1Session(
   const systemPrompt = buildT1SystemPrompt();
 
   const url = `${GEMINI_LIVE_URL}?key=${apiKey}`;
+  const proxyAgent = resolveGeminiProxyAgent();
   const factory =
     opts.clientFactory ??
-    ((u: string) => new NodeWebSocket(u) as unknown as WebSocketLike);
+    ((u: string) =>
+      new NodeWebSocket(
+        u,
+        proxyAgent ? { agent: proxyAgent } : undefined,
+      ) as unknown as WebSocketLike);
 
   const geminiWs = factory(url);