feat(agent): support cli tool scoped env (#37324)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

api/openapi/markdown/console-swagger.md

@@ -11853,6 +11853,7 @@ composer/publish validators and skipped by runtime request builders.
 | dangerous_command | boolean |  | No |
 | description | string |  | No |
 | enabled | boolean |  | No |
+| env | [AgentCliToolEnvConfig](#agentclitoolenvconfig) |  | No |
 | install | string |  | No |
 | install_command | string |  | No |
 | install_commands | [ string ] |  | No |
@@ -11867,6 +11868,13 @@ composer/publish validators and skipped by runtime request builders.
 | setup_command | string |  | No |
 | tool_name | string |  | No |
 
+#### AgentCliToolEnvConfig
+
+| Name | Type | Description | Required |
+| ---- | ---- | ----------- | -------- |
+| secret_refs | [ [AgentSecretRefConfig](#agentsecretrefconfig) ] |  | No |
+| variables | [ [AgentEnvVariableConfig](#agentenvvariableconfig) ] |  | No |
+
 #### AgentCliToolRiskLevel
 
 Risk marker for CLI tool bootstrap commands.