Add CLI formatter, fix env forwarding, rename job prefix to agent-claude-

- Add src/cli/ with format-event.ts (printClaudeStreamEvent) exported from
  CLIAdapterModule
- Fix env var forwarding: read from pod spec container env dynamically instead
  of static allowlist; agent config env overrides pod values
- Rename K8s Job prefix from agent- to agent-claude-
- Add fsGroupChangePolicy: "OnRootMismatch" to skip PVC chown on subsequent runs
- Add comprehensive test coverage (159 tests across 5 test files)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/server/k8s-client.ts

@@ -24,16 +24,6 @@ export interface SelfPodInfo {
   inheritedEnv: Record<string, string>;
 }
 
-/** Keys forwarded from the Deployment container env into Job pods. */
-const INHERITED_ENV_KEYS = [
-  "CLAUDE_CODE_USE_BEDROCK",
-  "AWS_REGION",
-  "AWS_BEARER_TOKEN_BEDROCK",
-  "ANTHROPIC_API_KEY",
-  "OPENAI_API_KEY",
-  "PAPERCLIP_API_URL",
-];
-
 let cachedSelfPod: SelfPodInfo | null = null;
 
 /**
@@ -141,13 +131,13 @@ export async function getSelfPodInfo(kubeconfigPath?: string): Promise<SelfPodIn
     }
   }
 
-  // Collect inherited env vars from process.env (these came from the Deployment spec)
+  // Collect env vars from the pod spec's container definition.
+  // Agent config env (set in buildEnvVars) will override these.
   const inheritedEnv: Record<string, string> = {};
-  for (const key of INHERITED_ENV_KEYS) {
-    const value = process.env[key];
-    if (value !== undefined) {
-      inheritedEnv[key] = value;
-    }
+  for (const envItem of mainContainer.env ?? []) {
+    if (!envItem.name) continue;
+    const value = envItem.value ?? "";
+    if (value) inheritedEnv[envItem.name] = value;
   }
 
   cachedSelfPod = {