The subagent `tools:` list restricts the available tool set, so the HA
and Paperless MCP tools must be enumerated to be usable. Add wildcards
`mcp__ha__*` and `mcp__paperless__*` (servers wired via the infra repo's
project-scoped .mcp.json + the claude-agent pod elevation).
Body: document the new powers the pod now provides — Forgejo PRs via the
API with $FORGEJO_TOKEN (git push pre-authenticated), scripts/tg apply
with auto Vault auth (~/.vault-token kept fresh by a sidecar), broad
kubectl write RBAC for non-Terraform-managed ad-hoc changes, and the MCP
tools with HTTP-API fallback if the servers aren't configured.
Not pushed — code only.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Add the read-only planner and full-powers exec agent definitions for the
nextcloud-todos service (Phase 3, tasks 3.1/3.2). COPY both into
/usr/share/agent-seed/ so the seed-beads-agent init-container can drop them
into ~/.claude/agents/ at pod start (task 3.3).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>