This is more a question than a request for a fix.

global-workflow-env depends on gh which itself depends on go. The latter reaches out to the internet during installation. In the past, we made efforts to avoid this for installing on air-gapped systems.

Similar problems are found with recent Python stacks that depend on rust (or rust-bootstrap) and then download internal dependencies as part of their builds (e.g. py-maturin). As opposed to global-workflow-env, this is a more common problem because several newer versions of Python packages depend on py-maturin or use rust. Replacing rust with rust-bootstrap does not solve the problem (see spack/spack#45483 for more information).