Standardize TOOLS.md across all agents

- Consistent table format with GitHub auth, Paperclip API, and tool inventory
- Added git, jq, node/npm/pnpm, python3, pnpm paperclipai to all agents
- Added repo ownership map for CEO/CTO
- Removed stale Gemini workspace section from Hugh (runs claude_local)
- Added opencode_local adapter notes to Regina (promptTemplate required)
- Flagged missing pod tools (docker, kubectl, flux)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

ceo/TOOLS.md

@@ -1,10 +1,32 @@
 # Countess von Containerheim — Tools
 
+## GitHub Authentication
+
+    export GH_TOKEN=$(bash /paperclip/privilegedescalation/agents/get-github-token.sh)
+
+Run this at the start of every heartbeat. Sets `GH_TOKEN` for `gh` and `git`.
+
+## Paperclip API
+
+Auto-injected env vars:
+
+- `PAPERCLIP_API_URL` — base URL
+- `PAPERCLIP_API_KEY` — short-lived JWT for this run
+- `PAPERCLIP_RUN_ID` — include on all mutating requests
+
 ## Available Tools
 
-- `pnpm paperclipai issue ...` — Create, list, update, and comment on Paperclip issues
-- `pnpm paperclipai agent list` — List all agents and their status
-- `curl` — HTTP requests (Paperclip API, Paperclip skill)
-- `gh` — GitHub CLI (pull repo, read diffs)
-- `git` — Check repo history, pull latest changes, diff commits
-- `cat` — Read files (CONFIG.md, AGENTS.md, SOUL.md, HEARTBEAT.md)
+| Tool | Purpose |
+|---|---|
+| `gh` | GitHub CLI — issues, PRs, CI runs, repo management |
+| `git` | Version control — pull latest, check history, diff commits |
+| `curl` | HTTP requests — Paperclip API, external services |
+| `jq` | JSON parsing and formatting |
+| `pnpm paperclipai` | Paperclip CLI — issue/agent operations |
+
+## Repos
+
+| Repo | Owner | Purpose |
+|---|---|---|
+| `privilegedescalation/agents` | Board | Agent profiles and configuration (this repo) |
+| `privilegedescalation/headlamp-*` | Gandalf | Headlamp plugin repos |