fix: nginx injects Authorization header for canvas auth

fix: IQ3_XS model, clean Dockerfile, dynamic token

fix: revert Dockerfile to clean version

fix: nginx injects Bearer token for canvas API requests

fix: text-only model config to prevent tool errors, nginx routing for canvas

fix: install python3 + pip3 in openclaw base image

fix: move pkill to runtime, only rm cron files during build

fix: use official openclaw image (all deps resolved), remove health daemon, smart proxy on 8080

fix: pin cmdop<=2026.3.20 to match openclaw 2026.3.20

fix: install tenacity, proxy health server handles OpenClaw crashes gracefully

fix: add zstd for ollama install

initial: OpenClaw + custom 70B IQ2_XS + Telegram