8ad8c956eb
The Gitea runner doesn't have direct filesystem access to /home/projekte_bao/openclaw/, so the previous python3 inline extraction would fail silently and no agents-sanitized.json would be generated. Now the deploy script uses a Docker container with bind mounts to read openclaw.json (readonly) and write agents-sanitized.json to the host. This completes the P4 migration: Nexus no longer needs read access to openclaw.json for any code path or deployment step.