Standardize TOOLS.md across all agents

- Consistent table format with GitHub auth, Paperclip API, and tool inventory
- Added git, jq, node/npm/pnpm, python3, pnpm paperclipai to all agents
- Added repo ownership map for CEO/CTO
- Removed stale Gemini workspace section from Hugh (runs claude_local)
- Added opencode_local adapter notes to Regina (promptTemplate required)
- Flagged missing pod tools (docker, kubectl, flux)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

cmo/TOOLS.md

@@ -1,8 +1,25 @@
 # Addison Addington — Tools
 
+## GitHub Authentication
+
+    export GH_TOKEN=$(bash /paperclip/privilegedescalation/agents/get-github-token.sh)
+
+Run this at the start of every heartbeat. Sets `GH_TOKEN` for `gh` and `git`.
+
+## Paperclip API
+
+Auto-injected env vars:
+
+- `PAPERCLIP_API_URL` — base URL
+- `PAPERCLIP_API_KEY` — short-lived JWT for this run
+- `PAPERCLIP_RUN_ID` — include on all mutating requests
+
 ## Available Tools
 
-- `gh` — GitHub CLI (repos, PRs, issues, actions)
-- `pnpm paperclipai issue ...` — Create, list, update, and comment on Paperclip issues
-- `pnpm paperclipai agent list` — List all agents and their status
-- `curl` — HTTP requests (e.g., loading the Paperclip skill)
+| Tool | Purpose |
+|---|---|
+| `gh` | GitHub CLI — issues, PRs, content repos |
+| `git` | Version control — branches, commits, PRs |
+| `curl` | HTTP requests — Paperclip API, external services |
+| `jq` | JSON parsing and formatting |
+| `pnpm paperclipai` | Paperclip CLI — issue/agent operations |