[Rui-Sun]

Manual Bug Server PR tests need to reach the existing CN public CI endpoint while running against the isolated PPE channel. Add an explicit ppe workflow environment and fixed routing headers to prepare, submit, and the independent completion reporter; keep the existing CN and BOE routes.

The run name records the environment. Routing headers are sent only to the allowlisted Bug Server CI endpoint, never to GitHub or artifact downloads. The frozen PR head and trusted control commit remain separate.

Validation:

• Node 22 control script tests: 6 passed, including PPE routing and artifact header isolation.
• Python bundle extraction tests: 6 passed.
• Workflow YAML parsed and PPE input/job/reporter wiring checked.
• Full visual suite attempted with Node 22 (node packages/vtable/scripts/visual-test.mjs): stopped at preflight because the temporary checkout lacks Rush dependencies (Cannot find module typescript). All 204 cases were not run; no visual pass is claimed. This PR changes workflow/control files only.
• CN PPE end-to-end verification will run on PR feat(vtable): auto-merge rectangular body multi-ranges #5320 after these trusted files reach the default branch.

[visactor-review-bot]

未发现可确认的新问题。