Panes cannot resolve the local user or DNS (ssh: No user exists for uid 501) #4100

Current behavior

Inside a herdr pane, any command that looks up the local macOS user account fails.
The same commands succeed in a plain iTerm2 tab outside herdr.

$ ssh root@<host>
No user exists for uid 501

$ id
uid=501 gid=20(staff) groups=20(staff),12(everyone),...     # username missing

$ launchctl managername
Could not get manager name.

$ dscl . -read /Users/<me> UniqueID
Operation failed with error: eServerError

$ dscacheutil -q user -a uid 501
(no output)

$ /bin/ls -ld ~
drwxr-x---+ 141 501  staff  ...                             # owner shown as 501, not the name

$ pgrep -l ssh
pgrep: Cannot get process list

dscacheutil -q user -a name root still works, so only non-system accounts fail to resolve.

DNS resolution fails the same way. Anything using the system resolver cannot resolve
hostnames, while dig, which queries the nameserver directly, works:

$ curl -sS https://example.com
curl: (6) Could not resolve host: example.com

$ dig +short example.com
104.20.23.154
172.66.147.243

So gh, git over https, curl, and brew are all broken in panes too.

Expected behavior

Same results inside a pane as outside it: id prints uid=501(<me>),
launchctl managername prints Aqua, and ssh connects.

Shortest exact reproduction

1. In a herdr pane: launchctl managername -> Could not get manager name.
2. In a plain iTerm2 tab: launchctl managername -> Aqua

The server in this case had been running detached since 2026-09-07 (7 days, PPID 1)
when I hit it. I have not tested whether a freshly started server reproduces it, so I
cannot confirm whether uptime or a login/logout cycle is part of the trigger.

Effect on my work

ssh is unusable in every pane, and so is anything else that reads the user record.
I have to leave herdr to run those commands.

Environment

• Herdr 0.8.2, stable channel
• macOS 26.6.2 (25G83), Apple Silicon
• iTerm2 3.6.11, zsh
• Server: herdr server, PID 38851, PPID 1, started 2026-09-07 13:11

Logs

herdr-server.log has no errors around the failure; startup and pane.spawned
lines look normal. Happy to attach more on request.