Add Brave Search web search to OpenClaw

- Enable web_search tool with Brave provider
- Add openclaw_brave_api_key secret to SOPS configuration
- Add BRAVE_API_KEY to openclaw.env template

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

configuration.nix

@@ -97,11 +97,13 @@
   # OpenClaw secrets
   sops.secrets.openclaw_discord_token = { };
   sops.secrets.openclaw_zai_api_key = { };
+  sops.secrets.openclaw_brave_api_key = { };
 
   sops.templates."openclaw.env" = {
     content = ''
       DISCORD_TOKEN=${config.sops.placeholder.openclaw_discord_token}
       ZAI_API_KEY=${config.sops.placeholder.openclaw_zai_api_key}
+      BRAVE_API_KEY=${config.sops.placeholder.openclaw_brave_api_key}
     '';
   };
 }

modules/openclaw-config.json

@@ -29,7 +29,14 @@
   },
   "tools": {
     "elevated": { "enabled": true },
-    "exec": { "security": "full", "ask": "off" }
+    "exec": { "security": "full", "ask": "off" },
+    "web": {
+      "search": {
+        "enabled": true,
+        "provider": "brave",
+        "apiKey": "${BRAVE_API_KEY}"
+      }
+    }
   },
   "models": {
     "providers": {