refactor(openclaw): thin Docker image with Nix deps offloaded to Harmonia

Strips runtime packages (nodejs_22, kubectl, jq, git, emacs, tsx, tea, pythonEnv, qmd) from the Docker image contents, reducing image size from ~2.7GB to ~1.5GB.

Key changes:
- Removed 9 runtime packages from contents (moved to openclaw-runtime-closure)
- Removed pythonEnv let binding and qmd parameter (no longer needed in image)
- Added OPENCLAW_RUNTIME_CLOSURE env var (bakes closure path for init container)
- Added runtime closure bin dir to PATH (resolves after PVC population)
- Added curl to contents (needed by init container for Harmonia health checks)
- CI: added openclaw-runtime-closure to build-and-cache PACKAGES array
- CI: added second sed command for CronJob image tag update
- CI: removed inherit qmd from openclaw-image callPackage (qmd now in runtime closure)

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

.gitea/workflows/ci.yml

@@ -50,6 +50,7 @@ jobs:
             custom-rclone-torbox-setup
             custom-opencode
             custom-qmd
+            openclaw-runtime-closure
             custom-nextcloud-talk-desktop
             qt-pinned-jellyfin-media-player
             qt-pinned-stremio
@@ -186,8 +187,12 @@ jobs:
       - name: Update HelmRelease image tag
         run: |
           cd k3s-cluster-config
+          # Update HelmRelease image tags (quoted format: tag: "version")
           sed -i 's|tag: ".*"|tag: "${{ needs.build-and-push-openclaw.outputs.image_tag }}"|' \
             clusters/oglenet/apps/communication/openclaw.yaml
+          # Update CronJob image reference (registry:tag format)
+          sed -i 's|registry.johnogle.info/openclaw:.*|registry.johnogle.info/openclaw:${{ needs.build-and-push-openclaw.outputs.image_tag }}|' \
+            clusters/oglenet/apps/communication/openclaw.yaml
 
       - name: Commit and push
         run: |