openclaw-hardener

Harden OpenClaw (workspace + ~/.openclaw): run OpenClaw security audit, detect prompt-injection and exfiltration risks, scan for leaked secrets, and apply safe fixes (chmod and exec-bit cleanup). Includes optional config.patch planning to reduce attack surface.