Strict deployment-owned environment bridge for the OTLP bus exporter.

The bridge is intentionally narrow: endpoint and header values are accepted only from the orchestrator environment, validated before application state changes, and never included in an error. Agent JSON cannot reach this path.