policies: add standard policy files, formatting, and secret scanning

- Add .editorconfig, .prettierrc, .prettierignore, .gitignore
- Add Makefile with fmt, fmt-check, secret-scan, test (skip) targets
- Add package.json with prettier
- Add tools/secret-scan.sh
- Add .secret-scan-allowlist for documentation token format references
- Sanitize documentation to use generic placeholders
- Auto-format with prettier
- make check passes clean

tests/test-anthropic-connection.mjs

@@ -18,7 +18,10 @@ if (!token) {
     try {
       const data = JSON.parse(fs.readFileSync(path, 'utf8'));
       token = data.anthropic?.access;
-      if (token) { console.log(`Token from: ${path}`); break; }
+      if (token) {
+        console.log(`Token from: ${path}`);
+        break;
+      }
     } catch {}
   }
 }
@@ -28,7 +31,10 @@ if (!token) {
   try {
     const env = fs.readFileSync('/root/openclaw/.env', 'utf8');
     const match = env.match(/ANTHROPIC_OAUTH_TOKEN="?([^"\n]+)/);
-    if (match) { token = match[1]; console.log('Token from: .env'); }
+    if (match) {
+      token = match[1];
+      console.log('Token from: .env');
+    }
   } catch {}
 }
 
@@ -70,35 +76,38 @@ if (isOAuth) {
 console.log('Sending test request to api.anthropic.com...');
 console.log('');
 
-const req = https.request({
-  hostname: 'api.anthropic.com',
-  path: '/v1/messages',
-  method: 'POST',
-  headers,
-}, (res) => {
-  let data = '';
-  res.on('data', (chunk) => data += chunk);
-  res.on('end', () => {
-    console.log(`Status: ${res.statusCode}`);
-    if (res.statusCode === 200) {
-      try {
-        const parsed = JSON.parse(data);
-        const text = parsed.content?.[0]?.text || '';
-        console.log(`Response: "${text}"`);
-        console.log(`Model: ${parsed.model}`);
+const req = https.request(
+  {
+    hostname: 'api.anthropic.com',
+    path: '/v1/messages',
+    method: 'POST',
+    headers,
+  },
+  (res) => {
+    let data = '';
+    res.on('data', (chunk) => (data += chunk));
+    res.on('end', () => {
+      console.log(`Status: ${res.statusCode}`);
+      if (res.statusCode === 200) {
+        try {
+          const parsed = JSON.parse(data);
+          const text = parsed.content?.[0]?.text || '';
+          console.log(`Response: "${text}"`);
+          console.log(`Model: ${parsed.model}`);
+          console.log('');
+          console.log('SUCCESS: Anthropic API connection working');
+        } catch {
+          console.log('Response:', data.substring(0, 200));
+        }
+      } else {
+        console.log('Response:', data.substring(0, 500));
         console.log('');
-        console.log('SUCCESS: Anthropic API connection working');
-      } catch {
-        console.log('Response:', data.substring(0, 200));
+        console.log('FAILED: API returned non-200 status');
+        process.exit(1);
       }
-    } else {
-      console.log('Response:', data.substring(0, 500));
-      console.log('');
-      console.log('FAILED: API returned non-200 status');
-      process.exit(1);
-    }
-  });
-});
+    });
+  },
+);
 
 req.on('error', (err) => {
   console.error('Connection error:', err.message);