fix: ensure password auth is set in all startup paths

_patch_config() was only called after dataset restore, not on fresh
installs or when persistence is disabled. This caused the literal
placeholder __OPENCLAW_PASSWORD__ to be used as the actual password.

Now _patch_config() is called in all code paths, and
_ensure_default_config() also replaces the password placeholder.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

scripts/sync_hf.py

@@ -125,12 +125,14 @@ class OpenClawFullSync:
         if not self.enabled:
             print("[SYNC] Persistence disabled - skipping restore")
             self._ensure_default_config()
+            self._patch_config()
             self._ensure_telegram_credentials()
             return
 
         if not self.dataset_exists:
             print(f"[SYNC] Dataset {HF_REPO_ID} does not exist - starting fresh")
             self._ensure_default_config()
+            self._patch_config()
             self._ensure_telegram_credentials()
             return
 
@@ -259,6 +261,10 @@ class OpenClawFullSync:
             try:
                 with open(config_path, "r") as f:
                     cfg = json.load(f)
+                # Replace password placeholder
+                if "gateway" in cfg and "auth" in cfg["gateway"]:
+                    if cfg["gateway"]["auth"].get("password") == "__OPENCLAW_PASSWORD__":
+                        cfg["gateway"]["auth"]["password"] = OPENCLAW_PASSWORD
                 if OPENROUTER_API_KEY:
                     # Replace placeholder with actual key
                     if "models" in cfg and "providers" in cfg["models"] and "openrouter" in cfg["models"]["providers"]: