Fix NET::ERR_CERT_AUTHORITY_INVALID via Chrome Enterprise Policy - Resolve pip's Externally-Managed-Environment Error-Troubleshooting Nginx 403 Permission Denied

Final checklist
- Confirm that the same symptom is gone after a restart or refresh.
- Keep the smallest working change and undo temporary diagnostic settings.