chore(vendor): import pi 1.3.0

Imported as a linear vendor commit so forge rebases do not replay the upstream root tree.

git-subtree-dir: third_party/pi

git-subtree-split: 71023aec1546d6d677a65669c5665c0927ce0dd0

third_party/pi/test.sh

@@ -69,6 +69,11 @@ for name in SystemRoot SYSTEMROOT WINDIR COMSPEC PATHEXT; do
 	[[ -z "$value" ]] || test_env+=("$name=$value")
 done
 
+# Trust extra certificates of proxies that inspect HTTPS (corporate proxies, sandboxes).
+# Network tests fail with self-signed certificate errors without it.
+value="${NODE_EXTRA_CA_CERTS-}"
+[[ -z "$value" ]] || test_env+=("NODE_EXTRA_CA_CERTS=$value")
+
 # Preserve CI detection only for runner behavior and test reporting.
 for name in CI GITHUB_ACTIONS; do
 	value="${!name-}"