feat(run): OpenClaw joins the supported agents table

[guyb1]

What

Two commits making OpenClaw a first-class, zero-config agent under onecli run:

1. supportedAgents row — skills install to ~/.openclaw/skills (verified against the published package: it loads skills from join(CONFIG_DIR, "skills")), hook install skipped (its hook system is its own, not Claude-style settings.json).
2. Automatic placeholder provider key — OpenClaw refuses to start a model turn without a provider key in its environment, and onecli run strips the server-provided ANTHROPIC_API_KEY, so a bare onecli run -- openclaw ... previously died on "Unknown model" unless the user hand-configured a placeholder. The agentSpec grows needsAnthropicKey: flagged agents get a self-describing placeholder (sk-ant-onecli-gateway-placeholder) ensured in the child env. An existing shell key wins (buildChildEnv passes those through today for every agent), and the gateway replaces x-api-key on every injected request either way — the placeholder can never reach the provider. Same pattern as the existing Codex auth stub.

Why it's known to work

• Overwrite semantics pinned, not assumed: a new gateway unit test in the cloud repo (rides onecli-cloud#748) asserts injection replaces an agent-supplied x-api-key with the vault key, exactly once, on both edition builds — the property this whole design rests on.
• Live end-to-end against a local EE stack (cloud gateway + api-server + KMS/Redis, OpenClaw in a sandbox container): a completely bare onecli run -- openclaw agent ... — no env wrapper, nothing in OpenClaw's config — booted the provider off the placeholder and completed the turn through the gateway, attributed to the right agent with injection_count=1 and the vault key upstream.

Verification

go build, go test -race (new TestEnsureEnv: append-when-absent, existing-value-wins without duplicates, no key-prefix false match; TestAgentSkillDir extended), golangci-lint 0 issues.

Companions: onecli/onecli-cloud#748 (Install page pill + the gateway overwrite pin + org-key /v1/user fix) · onecli/onecli-docs#13 (supported-agents row; tip updated to describe the automatic placeholder).

🤖 Generated with Claude Code