feat: add clawdash fleet dashboard sidecar

[mostlydev]

Summary

• add runtime pod manifest generation during claw up (.claw-runtime/pod-manifest.json)
• inject hardened clawctl service into compose output when claw services exist
• add new clawctl web server with Fleet, Topology, and Detail pages plus /api/status polling
• add Docker image build recipe at dockerfiles/clawctl/Dockerfile
• add tests for manifest generation, compose injection, and clawctl handler routes

Verification

• go test ./...

[mostlydev]

Follow-up update on this PR:

• Added CI workflow at .github/workflows/clawctl-image.yml.
• Workflow behavior:
  • Builds/checks the clawctl image on pull requests.
  • Publishes ghcr.io/<repo_owner>/clawctl on pushes to master and release tags (v*).

Local smoke verification completed with a real claw up lifecycle using testdata/openclaw-stub and CLAWCTL_ADDR=:9082:

• clawctl service was injected into compose and started.
• Fleet dashboard endpoint served: GET /.
• Live status endpoint served: GET /api/status.

Smoke run highlights:

• docker compose ps showed both gateway and clawctl containers up.
• /api/status returned live JSON including gateway health/state/uptime.