[ci skip] openclaw: disable sandbox, run commands on container host

- exec.host: sandbox → local (run directly on container, no Docker sandbox)
- exec.security: full → off (no restrictions on command execution)

stacks/openclaw/main.tf

@@ -112,8 +112,8 @@ resource "kubernetes_config_map" "openclaw_config" {
         profile = "full"
         deny    = []
         exec = {
-          host        = "sandbox"
+          host        = "local"
-          security    = "full"
+          security    = "off"
           ask         = "off"
           pathPrepend = ["/tools", "/workspace/infra"]
         }