feat: Add SSH key configuration and OS-aware Tailscale installation

Features:
- Add clawdbot_ssh_keys variable for SSH access configuration
- Split Tailscale installation into OS-specific tasks
- Tailscale support for macOS (Homebrew Cask)
- Tailscale support for Linux (apt repository)
- Automatic SSH directory creation with proper permissions
- SSH key status messages and warnings

Documentation:
- Add comprehensive configuration guide (docs/configuration.md)
- Document all available variables with examples
- Add security best practices for SSH keys and Tailscale
- Add environment-specific configuration examples
- Update README with configuration section and links

Files:
- roles/clawdbot/defaults/main.yml - Add clawdbot_ssh_keys variable
- roles/clawdbot/tasks/user.yml - Add SSH key configuration
- roles/clawdbot/tasks/tailscale.yml - Refactor to orchestrator
- roles/clawdbot/tasks/tailscale-linux.yml - Linux-specific Tailscale
- roles/clawdbot/tasks/tailscale-macos.yml - macOS-specific Tailscale
- docs/configuration.md - Complete configuration guide
- README.md - Add configuration section and documentation links

Linting:
- yamllint: PASSED
- ansible-lint: PASSED (production profile)

Author: sheeek

README.md

@@ -122,10 +122,12 @@ Verify: `nmap -p- YOUR_SERVER_IP` should show only port 22 open.
 
 ## Documentation
 
-- [Security Architecture](docs/security.md)
-- [Technical Details](docs/architecture.md)
-- [Troubleshooting](docs/troubleshooting.md)
-- [Agent Guidelines](AGENTS.md)
+- [Configuration Guide](docs/configuration.md) - All configuration options
+- [Development Mode](docs/development-mode.md) - Build from source
+- [Security Architecture](docs/security.md) - Security details
+- [Technical Details](docs/architecture.md) - Architecture overview
+- [Troubleshooting](docs/troubleshooting.md) - Common issues
+- [Agent Guidelines](AGENTS.md) - AI agent instructions
 
 ## Requirements
 
@@ -197,6 +199,82 @@ This will:
 - Symlink binary to `~/.local/bin/clawdbot`
 - Add development aliases to `.bashrc`
 
+## Configuration Options
+
+All configuration variables can be found in [`roles/clawdbot/defaults/main.yml`](roles/clawdbot/defaults/main.yml).
+
+You can override them in three ways:
+
+### 1. Via Command Line
+
+```bash
+ansible-playbook playbook.yml --ask-become-pass \
+  -e clawdbot_install_mode=development \
+  -e "clawdbot_ssh_keys=['ssh-ed25519 AAAAC3... user@host']"
+```
+
+### 2. Via Variables File
+
+```bash
+# Create vars.yml
+cat > vars.yml << EOF
+clawdbot_install_mode: development
+clawdbot_ssh_keys:
+  - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGxxxxxxxx user@host"
+  - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAB... user@host"
+clawdbot_repo_url: "https://github.com/YOUR_USERNAME/clawdbot.git"
+clawdbot_repo_branch: "feature-branch"
+tailscale_authkey: "tskey-auth-xxxxxxxxxxxxx"
+EOF
+
+# Use it
+ansible-playbook playbook.yml --ask-become-pass -e @vars.yml
+```
+
+### 3. Edit Defaults Directly
+
+Edit `roles/clawdbot/defaults/main.yml` before running the playbook.
+
+### Available Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `clawdbot_user` | `clawdbot` | System user name |
+| `clawdbot_home` | `/home/clawdbot` | User home directory |
+| `clawdbot_install_mode` | `release` | `release` or `development` |
+| `clawdbot_ssh_keys` | `[]` | List of SSH public keys |
+| `clawdbot_repo_url` | `https://github.com/clawdbot/clawdbot.git` | Git repository (dev mode) |
+| `clawdbot_repo_branch` | `main` | Git branch (dev mode) |
+| `tailscale_authkey` | `""` | Tailscale auth key for auto-connect |
+| `nodejs_version` | `22.x` | Node.js version to install |
+
+See [`roles/clawdbot/defaults/main.yml`](roles/clawdbot/defaults/main.yml) for the complete list.
+
+### Common Configuration Examples
+
+#### SSH Keys for Remote Access
+
+```bash
+ansible-playbook playbook.yml --ask-become-pass \
+  -e "clawdbot_ssh_keys=['ssh-ed25519 AAAAC3... user@host']"
+```
+
+#### Development Mode with Custom Repository
+
+```bash
+ansible-playbook playbook.yml --ask-become-pass \
+  -e clawdbot_install_mode=development \
+  -e clawdbot_repo_url=https://github.com/YOUR_USERNAME/clawdbot.git \
+  -e clawdbot_repo_branch=feature-branch
+```
+
+#### Tailscale Auto-Connect
+
+```bash
+ansible-playbook playbook.yml --ask-become-pass \
+  -e tailscale_authkey=tskey-auth-xxxxxxxxxxxxx
+```
+
 ## License
 
 MIT - see [LICENSE](LICENSE)

RELEASE_NOTES_v2.0.0.md

@@ -0,0 +1,118 @@
+# Release v2.0.0 - Multi-OS Support & Critical Fixes
+
+## 🎉 Major Release
+
+This release adds **multi-OS support** (macOS + Linux), **development mode**, and fixes **all critical issues** reported by users.
+
+### ✨ New Features
+
+#### Multi-OS Support
+- ✅ **macOS support** alongside Debian/Ubuntu
+- ✅ **Homebrew** automatically installed on both platforms
+- ✅ OS-specific tasks for clean separation
+- ✅ Automatic OS detection with proper fallback
+
+#### Installation Modes
+- ✅ **Release Mode** (default): `pnpm install -g clawdbot@latest`
+- ✅ **Development Mode**: Clone repo, build from source, symlink binary
+- ✅ Switch with `-e clawdbot_install_mode=development`
+- ✅ Development aliases: `clawdbot-rebuild`, `clawdbot-dev`, `clawdbot-pull`
+
+### 🐛 Critical Bug Fixes
+
+All issues from user feedback resolved:
+
+1. ✅ **DBus Session Bus Errors**
+   - Auto-configured `loginctl enable-linger`
+   - Dynamic `XDG_RUNTIME_DIR=/run/user/$(id -u)`
+   - Proper `DBUS_SESSION_BUS_ADDRESS` setup
+   - No more manual `eval $(dbus-launch --sh-syntax)` needed!
+
+2. ✅ **User Switch Command**
+   - Fixed from `sudo -i -u clawdbot` to `sudo su - clawdbot`
+   - Ensures proper login shell with environment
+
+3. ✅ **Homebrew Integration**
+   - Installed for both Linux and macOS
+   - Added to PATH in both `.bashrc` and `.zshrc`
+   - `brew shellenv` properly configured
+
+4. ✅ **PNPM Configuration**
+   - `PNPM_HOME` properly set in shell configs
+   - PATH includes pnpm directories
+   - Correct permissions on `~/.local/share/pnpm`
+
+5. ✅ **User-ID Dynamic**
+   - No longer hardcoded to 1000
+   - Dynamically determined with `id -u`
+
+### 🔧 Improvements
+
+- ✅ **Better onboarding**: Recommends `clawdbot onboard --install-daemon`
+- ✅ **No auto-config**: Config files created by clawdbot itself
+- ✅ **Enhanced security**: systemd service hardening
+- ✅ **Linting**: yamllint & ansible-lint production profile passed
+
+### 📦 Installation
+
+#### Quick Start (Release Mode)
+```bash
+curl -fsSL https://raw.githubusercontent.com/clawdbot/clawdbot-ansible/main/install.sh | bash
+```
+
+#### Development Mode
+```bash
+git clone https://github.com/clawdbot/clawdbot-ansible.git
+cd clawdbot-ansible
+./run-playbook.sh -e clawdbot_install_mode=development
+```
+
+### 📚 Documentation
+
+- [README.md](README.md) - Getting started
+- [CHANGELOG.md](CHANGELOG.md) - Full changelog
+- [UPGRADE_NOTES.md](UPGRADE_NOTES.md) - Technical details
+- [docs/development-mode.md](docs/development-mode.md) - Development guide
+
+### ⚠️ Breaking Changes
+
+1. **User switch command changed**: Use `sudo su - clawdbot` instead of `sudo -i -u clawdbot`
+2. **No auto-configuration**: Config files no longer auto-generated, use `clawdbot onboard`
+3. **No auto-service**: systemd service not auto-installed, use `--install-daemon` flag
+
+### 🔄 Migration
+
+For existing installations:
+```bash
+# Add environment variables
+echo 'export XDG_RUNTIME_DIR=/run/user/$(id -u)' >> ~/.bashrc
+echo 'export PNPM_HOME="$HOME/.local/share/pnpm"' >> ~/.bashrc
+
+# Enable lingering
+sudo loginctl enable-linger clawdbot
+
+# Add Homebrew (Linux)
+echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >> ~/.bashrc
+
+# Reload
+source ~/.bashrc
+
+# Reinstall clawdbot
+pnpm install -g clawdbot@latest
+```
+
+### 📊 Testing
+
+- ✅ yamllint: **PASSED**
+- ✅ ansible-lint: **PASSED** (production profile)
+- ✅ Tested on Debian 11/12
+- ✅ Tested on Ubuntu 20.04/22.04
+- ⚠️  macOS framework ready (needs real hardware testing)
+
+### 🙏 Thanks
+
+Special thanks to early adopters who provided feedback on the DBus and user switching issues!
+
+---
+
+**Full Changelog**: https://github.com/clawdbot/clawdbot-ansible/blob/main/CHANGELOG.md