docs: add Cursor Cloud environment setup notes

[rrama]

What

Adds a ## Cursor Cloud specific instructions section to AGENTS.md capturing durable, non-obvious setup notes for agents running in the Cursor Cloud Linux VM.

Notes captured

• Node/npm must come from the clean nvm v22.22.3 + npm@11.12.1 (prepend to PATH); /exec-daemon/node has no npm and the preinstalled nvm npm is corrupted. engine-strict=true enforces npm ^11.12.1.
• Pin GOTOOLCHAIN=go1.26.5 (avoids the blocked go.dev).
• Build with make build BUILD_MODE=public (cliv2-private/ inaccessible); convco must be on PATH.
• go.dev license workaround: go-licenses save --force wipes the licenses tree, then a manual download from the blocked go.dev fails. Let the build generate the tree once, place go.dev/LICENSE from the GitHub mirror, and stamp cliv2/_cache/prepare-3rd-party-licenses so make skips the step.

Verification

make build BUILD_MODE=public (ok, ./binary-releases/snyk-linux --version), cd cliv2 && go test ./pkg/... ./internal/... (pass), npx jest test/jest/unit/lib/formatters (120 pass), and TEST_SNYK_COMMAND=./binary-releases/snyk-linux npx jest test/jest/acceptance/snyk-test/all-projects.spec.ts (20 pass, fake-server).

  

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

	Warnings
⚠️	Since the CLI is unifying on a standard and improved tooling, we're starting to migrate old-style imports and exports to ES6 ones. A file you've modified is using either module.exports or require(). If you can, please update them to ES6 import syntax and export syntax. Files found: AGENTS.md
⚠️	There are multiple commits on your branch, please squash them locally before merging!

Generated by 🚫 dangerJS against 5d8b01f