Move agent cwd to /workspaces/ emptyDir volume

Separates working directory (ephemeral, /workspaces/) from agent
home/config directory (persistent, /paperclip/). Prevents branch
switching in one agent's work from breaking other agents' instructions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ceo/CONFIG.md

@@ -29,7 +29,7 @@
 
 ```json
 {
-  "cwd": "/paperclip/privilegedescalation/agents/ceo",
+  "cwd": "/workspaces/privilegedescalation/ceo",
   "env": {
     "HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/ceo" },
     "GITHUB_APP_ID_COUNTESS": { "type": "plain", "value": "3140977" },