fix: revert invalid OpenClaw config keys causing RUNTIME_ERROR

- Remove auth.defaultScope and gateway.auth.scope (unrecognized by OpenClaw)
- Remove security.scope from A2A gateway config
- These caused "Config invalid" crash on all Spaces
- Force rebuild (v3.6)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Dockerfile

@@ -1,4 +1,4 @@
-# OpenClaw on Hugging Face Spaces — Pre-built image (v3.5)
+# OpenClaw on Hugging Face Spaces — Pre-built image (v3.6)
 # Uses official pre-built image to avoid 30+ minute builds on cpu-basic
 
 # ── Stage 1: Pull pre-built OpenClaw ─────────────────────────────────────────

scripts/sync_hf.py

@@ -442,7 +442,7 @@ class OpenClawFullSync:
                 "mode": "local",
                 "bind": "lan",
                 "port": 7860,
-                "auth": {"token": GATEWAY_TOKEN, "scope": "operator"},
+                "auth": {"token": GATEWAY_TOKEN},
                 "trustedProxies": ["0.0.0.0/0"],
                 "controlUi": {
                     "allowInsecureAuth": True,
@@ -455,8 +455,6 @@ class OpenClawFullSync:
             # Ensure agents defaults
             data.setdefault("agents", {}).setdefault("defaults", {}).setdefault("model", {})
             data.setdefault("session", {})["scope"] = "global"
-            # Grant operator scope for A2A gateway dispatch
-            data.setdefault("auth", {})["defaultScope"] = "operator"
 
             # Build providers from scratch — only include providers with active API keys.
             # This ensures removed secrets don't leave stale providers from backup.
@@ -531,7 +529,7 @@ class OpenClawFullSync:
                             "skills": [{"id": "chat", "name": "chat", "description": "Chat bridge"}]
                         },
                         "server": {"host": "0.0.0.0", "port": 18800},
-                        "security": {"inboundAuth": "none", "scope": "operator"},
+                        "security": {"inboundAuth": "none"},
                         "routing": {"defaultAgentId": "main"},
                         "peers": peers
                     }