fix: remove chmod /etc/hosts (read-only in build), run DNS sync before app

fix: write DNS results to /etc/hosts for undici/fetch compatibility

feat: switch to password auth + project README

fix: set OPENCLAW_VERSION from package.json for correct version display

fix: disable auth (mode:none) + patch CSP frame-ancestors for HF iframe embedding

fix: move inject-token to runtime entrypoint (build-time injection ignored by OpenClaw)

perf: node user build (-104s chown), merge RUN layers (-170s), plugin whitelist (-40s)

feat: add timing to all stages, fix OPENROUTER_API_KEY crash, async DNS

deploy: HuggingClaw with original Dockerfile