use-native-credential-proxy

# Use Native Credential Proxy This skill replaces the OneCLI gateway with NanoClaw's built-in credential proxy. Containers get credentials injected via a local HTTP proxy that reads from `.env` — no external services needed. ## Phase 1: Pre-flight ### Check if already applied Check if `src/credential-proxy.ts` is imported in `src/index.ts`: ```bash grep "credential-proxy" src/index.ts ``` If it shows an import for `startCredentialProxy`, the native proxy is already active. Skip to Phase 3 (Setup). ### Check if OneCLI is active ```bash grep "@onecli-sh/sdk" package.json ``` If `@onecli-sh/sdk` appears, OneCLI is the active credential provider. Proceed with Phase 2 to replace it. If neither check matches, you may be on an older version. Run `/update-nanoclaw` first, then retry. ## Phase 2: Apply Code Changes ### Ensure upstream remote ```bash git remote -v ``` If `upstream` is missing, add it: ```bash git remote add upstream https://github.com/qwibitai/nanoclaw.git ``` ### Merge the skill branch ```bash git fetch upstream skill/native-credential-proxy git merge upstream/skill/native-credential-proxy || { git checkout --theirs package-lock.json git add package-lock.json git merge --continue } ``` This merges in: - `src/credential-proxy.ts` and `src/credential-proxy.test.ts` (the proxy implementation) - Restored credential proxy usage in `src/index.ts`, `src/container-runner.ts`, `src/container-runtime.ts`, `src/config.ts` - Removed `@onecli-sh/sdk` depend...