[codex] consolidate canonical v2 setup

[isolot]

Summary

This draft PR consolidates the current local nanoclaw-v2 workspace as the canonical v2 setup against upstream main, then reconciles the upstream fixes that are still relevant after the v1 to v2 upgrade.

It intentionally uses the local working tree as the source of truth, excluding ignored local-only state such as .env, node_modules, data, logs, groups, and backup/runtime folders.

What changed

• Reconciles GitHub with the local canonical v2 file tree.
• Removes older v1/migration/CLI-era files that are absent from the canonical local setup.
• Adds the current Bun setup, dashboard server/UI/pusher code, Telegram support, phantom filtering, MCP skills tooling, finance/risk/podcast/trade-video skills, backup/research/podcast scripts, and related docs.
• Pulls in the useful upstream v2 fixes that were missing from the canonical local tree:
  • UTC parsing for SQLite timestamps in host sweep stuck-claim logic.
  • Chat SDK media-only message routing and send_card display-card delivery.
  • Dynamic Claude MCP tool allowlist generation for added MCP servers.
  • Agent-to-agent reply routing back to the originating session.
  • Per-destination thread routing for explicit <message to="..."> blocks.
  • Race-free on_wake follow-up messages for self-mod restarts.
  • OneCLI gateway pin/legacy cleanup, restored Node install flow, Slack file scopes, and repo rename cleanup from qwibitai/nanoclaw to nanocoai/nanoclaw with fallback where needed.

Important review notes

• The local canonical package.json version is 2.0.25; upstream main was at 2.0.62 when this branch was created.
• This PR is a large snapshot-style reconciliation: the first commit is the canonical local tree, and the second commit is the focused upstream-fix reconciliation.
• The upstream repository grants the current GitHub account read-only access, so the branch is pushed from the isolot/nanoclaw fork.

Validation

• pnpm install --frozen-lockfile --ignore-scripts
• pnpm rebuild better-sqlite3
• pnpm run typecheck
• pnpm run format:check
• pnpm run lint
• pnpm test — 28 files / 290 tests passed
• cd container/agent-runner && bun install --frozen-lockfile
• cd container/agent-runner && bun run typecheck
• cd container/agent-runner && bun test — 78 tests passed

Secret hygiene

• Local .env was not copied into the branch.
• Ignored runtime/dependency directories were not staged.
• Content scan found only placeholder/example tokens and intentional fake test values.