[ci skip] openclaw: fix exec config — use host=node, security=full

Valid options: host=sandbox|gateway|node, security=deny|allowlist|full.
Using node (run on container host) with full (no command restrictions).

stacks/openclaw/main.tf

@@ -112,8 +112,8 @@ resource "kubernetes_config_map" "openclaw_config" {
         profile = "full"
         deny    = []
         exec = {
-          host        = "local"
-          security    = "off"
+          host        = "node"
+          security    = "full"
           ask         = "off"
           pathPrepend = ["/tools", "/workspace/infra"]
         }