docs: remove deny ["gateway"] from tools config

docs: update LLM config for Grok reasoning fallback and Brave web search

docs: replace tarball backup with Git-based offsite backup strategy

docs: add quick reference page with day-to-day OpenClaw commands

docs: add systemd drop-in for SSH boot order and reboot troubleshooting

docs: improve rescue recovery steps and add console access warning

fix: add safe-pip-install and correct sudo reference in AGENTS.md summary

fix: restore /usr/bin/sudo in exec-approvals and correct defense-in-depth narrative

fix: address review findings — add safe-pip-install, fix daemon-reload, remove wildcards

fix: address 14 audit findings — sudoers hardening, safe wrappers, secrets protection

refactor: move all deployment knowledge to AGENTS.md, make CLAUDE.md a thin pointer

fix: centralize all API keys in /etc/openclaw/env across docs and scripts

fix: address audit findings — scripts robustness + SOUL.md package policy

fix: audit corrections — verify script, architecture diagram, security model

fix: set CapabilityBoundingSet to specific caps required by apt