v0.1.5 — scheduled agents (cron) + PATH de-dup

Added

• Scheduled agents via cron: the cron daemon is installed and started at boot, and the crontab is a real file in the persistent ~/.claude volume (~/.claude/cron/crontab) re-installed into the live spool every boot by init-cron.sh. Symlinking the spool into a volume can't work — Debian's Vixie cron silently ignores symlinked / wrong-perm crontabs — so the file is the source of truth and survives rebuilds. Jobs run with a reconstructed environment (cron.env regenerated each boot + SHELL=/bin/bash + BASH_ENV), so claude -p runs non-interactively with the persisted ~/.claude auth. Helpers: crontab-edit / crontab-reload; make cron-reload / make cron-log.

Fixed

• /usr/local/share/npm-global/bin appeared twice in PATH (section 4 prepended it for the build, then the final ENV prepended it again). The runtime PATH is now spelled out in full to match entrypoint.sh, so it's single-entry and no longer leaks the duplicate into snapshots of the live env (e.g. cron.env).

Documentation

• New "Scheduled agents (cron)" sections in README.md and the in-container seed/CLAUDE.md; CLAUDE.md documents the cron invariants (file-not-symlink source of truth, the stripped-env reconstruction via cron.env + BASH_ENV, and the pgrep-guarded daemon start).

Full changelog: v0.1.4...v0.1.5