docker hardening

Secure an OpenClaw Docker deployment with trusted images, non-root execution, restricted mounts, gateway authentication, agent sandboxing, resource limits, secret isolation, and safe remote access.