feat: add Codex and Claude Code support via ACP adapters

[thepagent]

Summary

Add Codex and Claude Code as pluggable agent backends alongside kiro-cli.

⚠️ Breaking Change: PVC mount

The PVC mount changed from individual subPaths to the entire home directory:

Before (0.1.8):

- mountPath: /home/agent/.kiro
  subPath: dot-kiro
- mountPath: /home/agent/.local/share/kiro-cli
  subPath: kiro-cli-data

After (0.1.9):

- mountPath: /home/agent

Migration for existing kiro-cli users: After upgrading, copy data from subPaths to the new layout:

kubectl exec deployment/agent-broker -- sh -c "
  cp -a /home/agent/dot-kiro/. /home/agent/.kiro/ 2>/dev/null
  mkdir -p /home/agent/.local/share/kiro-cli
  cp -a /home/agent/kiro-cli-data/. /home/agent/.local/share/kiro-cli/ 2>/dev/null
"
kubectl rollout restart deployment agent-broker

Or simply re-authenticate: kubectl exec -it deployment/agent-broker -- kiro-cli login --use-device-flow

Changes

Dockerfiles

• Dockerfile.codex — node:22 + @zed-industries/codex-acp@0.9.5 + @openai/codex CLI
• Dockerfile.claude — node:22 + @agentclientprotocol/claude-agent-acp@0.25.0 + @anthropic-ai/claude-code CLI

Helm chart (0.1.9)

• PVC mount simplified — persist entire /home/agent instead of individual subPaths. Ensures auth tokens for any CLI backend survive pod restarts.
• Dynamic NOTES.txt — shows backend-specific auth instructions based on agent.command value (kiro-cli, codex, claude)

CI

• Build workflow now produces 3 multi-arch images via matrix:
  • ghcr.io/thepagent/agent-broker (kiro-cli, default)
  • ghcr.io/thepagent/agent-broker-codex
  • ghcr.io/thepagent/agent-broker-claude

Usage

# Codex
image:
  repository: ghcr.io/thepagent/agent-broker-codex
agent:
  command: codex-acp
# Auth: kubectl exec -it deploy/agent-broker -- codex login --device-auth

# Claude Code
image:
  repository: ghcr.io/thepagent/agent-broker-claude
agent:
  command: claude-agent-acp
# Auth: kubectl exec -it deploy/agent-broker -- claude setup-token
# Then: --set env.CLAUDE_CODE_OAUTH_TOKEN="<token>"

Tested

• ✅ codex-acp ACP initialize locally and in k3s
• ✅ claude-agent-acp ACP initialize locally and in k3s
• ✅ Both backends responding to Discord messages end-to-end

Reference

• zed-industries/codex-acp
• agentclientprotocol/claude-agent-acp
• OpenClaw acpx built-in agent commands

Closes #14, closes #16