Add OpenClaw AI Agent module

- Systemd service running OpenClaw gateway
- Configurable via sops secrets
- Runs on localhost:18789

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

modules/openclaw-config.json

@@ -0,0 +1,80 @@
+{
+  "gateway": {
+    "port": 18789,
+    "bind": "loopback",
+    "trustedProxies": ["::1", "127.0.0.1", "10.88.0.0/16", "10.89.0.0/16"],
+    "auth": {
+      "mode": "none"
+    },
+    "controlUi": {
+      "dangerouslyAllowHostHeaderOriginFallback": true,
+      "allowedOrigins": ["*"]
+    }
+  },
+  "channels": {
+    "whatsapp": {
+      "enabled": false
+    },
+    "discord": {
+      "enabled": true,
+      "groupPolicy": "open",
+      "dmPolicy": "open",
+      "allowFrom": ["*"]
+    }
+  },
+  "agents": {
+    "defaults": {
+      "model": {
+        "primary": "openai/gemini-3.1-pro-high"
+      },
+      "memorySearch": {
+        "provider": "openai",
+        "model": "nomic-embed-text",
+        "remote": {
+          "baseUrl": "http://localhost:11434/v1"
+        }
+      }
+    }
+  },
+  "tools": {
+    "exec": {
+      "security": "full",
+      "ask": "off"
+    }
+  },
+  "skills": {
+    "entries": {}
+  },
+  "commands": {
+    "native": true,
+    "nativeSkills": "auto",
+    "restart": true,
+    "ownerDisplay": "raw"
+  },
+  "models": {
+    "mode": "merge",
+    "providers": {
+      "openai": {
+        "baseUrl": "http://localhost:8045/v1/chat/completions",
+        "apiKey": "${OPENAI_API_KEY}",
+        "api": "openai",
+        "models": [
+          {
+            "id": "gemini-3.1-pro-high",
+            "name": "Gemini 3.1 Pro High",
+            "reasoning": true,
+            "contextWindow": 1000000,
+            "maxTokens": 65536
+          },
+          {
+            "id": "claude-opus-4-6-thinking",
+            "name": "Claude Opus 4.6 Thinking",
+            "reasoning": true,
+            "contextWindow": 1000000,
+            "maxTokens": 65536
+          }
+        ]
+      }
+    }
+  }
+}