test(nodejs): validate agentless EVP exposure egress

[leoromanovsky]

Motivation

Node.js agentless exposure delivery needs route-level system coverage for direct and sidecar deployments.

Changes

• Activate Node.js Agent, direct, and sidecar exposure egress coverage for express4 at v7.0.0-pre.
• Mount the checked-in system-test CA bundle at /etc/ssl/certs/ca-certificates.crt.
• Point NODE_EXTRA_CA_CERTS at the mounted system bundle for direct HTTPS capture.

Decisions

• Preserve TLS verification through the system-test proxy.
• Keep the direct scenario free of Agent endpoint variables.
• Base this draft on the shared Node.js and Java EVP egress harness in test(ffe): validate Node and Java EVP egress #7601.

Validation

• ./format.sh --check
• Focused agentless TEST_THE_TEST: 9 passed
• Manifest computation: both egress tests remain disabled at 6.99.0 and activate for express4 at 7.0.0-pre
• ./build.sh nodejs -w express4 against local dd-trace-js fallback head bd08b048
• Agent exposure egress: 1 passed in 30.06s
• Direct exposure egress: 1 passed in 18.46s
• Sidecar exposure egress: 1 passed in 19.57s

Tracks FFL-1488.

Questions: #apm-shared-testing

🟣 SYSTEM-TESTS DOCUMENTATION USED: docs/edit/manifest.md, docs/execute/build.md, docs/execute/binaries.md

[github-actions]

CODEOWNERS have been resolved as:

manifests/nodejs.yml                                                    @DataDog/system-tests-reviewers
utils/_context/_scenarios/agentless_endtoend.py                         @DataDog/system-tests-core

[datadog-datadog-prod-us1]

🎉 All green!

❄️ No new flaky tests detected

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 96c1e5e | Docs | View more details | Give us feedback!}