[FEATURE] Use a Virtual-Hosted Style URL for GCS in Native Install

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

Our environment restricts network access to only allow connections to explicitly approved hosts. However, the Native Install uses GCS Path-Style URLs (e.g., https://storage.googleapis.com/<bucket-name>/...), which means we must allowlist all GCS buckets to install Claude Code. This creates an unnecessarily broad security exception.

Proposed Solution

Please switch the GCS URLs to Virtual-Hosted Style (e.g., https://<bucket-name>.storage.googleapis.com/...). This would allow us to allowlist only the specific bucket used for Claude Code packages, rather than granting access to all of GCS.

Reference: https://docs.cloud.google.com/storage/docs/request-endpoints#xml-api

Alternative Solutions

If switching entirely to Virtual-Hosted Style is not feasible, please consider adding a configuration option to choose between Path-Style and Virtual-Hosted Style URLs.

Priority

Critical - Blocking my work

Feature Category

Other

Use Case Example

_No response_

Additional Context

Follow-up to #25409 (closed as stale).
The issue still persists.