Local Ai

v0.40.6-rc1: transfer: support proxies on registry redirect targets (#19065)

Behind a proxy, defer redirect-target DNS to the proxy; without one, keep the resolve-and-pin path. Trust default-registry/CDN hostnames with no local DNS. Fix a nil CancelFunc crash in blobDownload.r