policies: add standard policy files, formatting, and secret scanning

- Add .editorconfig, .prettierrc, .prettierignore, .gitignore
- Add Makefile with fmt, fmt-check, secret-scan, test (skip) targets
- Add package.json with prettier
- Add tools/secret-scan.sh
- Add .secret-scan-allowlist for documentation token format references
- Sanitize documentation to use generic placeholders
- Auto-format with prettier
- make check passes clean

scripts/fix-auth-profiles.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 # fix-auth-profiles.sh — Fix broken Anthropic auth profiles in all OpenClaw agents
 #
-# Problem: Auth profiles may have {type:"oauth", key:"sk-ant-oat01-..."}
+# Problem: Auth profiles may have {type:"oauth", key:"<access-token-value>"}
 # but OpenClaw's isValidProfile() for type:"oauth" checks for "access" field, not "key"
 # This causes the profile to be skipped and fall through to env var fallback
 #