docs: update claude setup

refactor: Move some things to roles
refactor: fix some linting

roles/openclaw/defaults/main.yml

@@ -0,0 +1,23 @@
+---
+# OpenClaw service user
+openclaw_user: openclaw
+openclaw_group: openclaw
+openclaw_home: /opt/openclaw
+openclaw_state_dir: /opt/openclaw/.openclaw
+openclaw_node_version: "24"
+
+# Model provider
+openclaw_model_provider: anthropic
+openclaw_api_key: "{{ vault_openclaw_api_key }}"
+
+# Signal channel
+openclaw_signal_enabled: false
+openclaw_signal_account: "{{ vault_openclaw_signal_phone | default('') }}"
+openclaw_signal_cli_version: "0.13.15"
+openclaw_signal_cli_path: /usr/local/bin/signal-cli
+openclaw_signal_dm_policy: pairing
+openclaw_signal_allow_from: []      # list of E.164 numbers permitted to DM
+
+# Firewall
+openclaw_ssh_port: 22
+openclaw_gateway_port: 18789