[ci skip] openclaw: set workspace + enable elevated + native commands

- Set workspace to /workspace/infra (was defaulting to ~/.openclaw/workspace)
- Enable tools.elevated for unrestricted access
- Enable commands.native and commands.nativeSkills
- All tools, commands, and skills now fully accessible

stacks/openclaw/main.tf

@@ -89,6 +89,7 @@ resource "kubernetes_config_map" "openclaw_config" {
         defaults = {
           contextTokens     = 1000000
           bootstrapMaxChars = 30000
+          workspace         = "/workspace/infra"
           sandbox = {
             mode = "off"
           }
@@ -114,6 +115,9 @@ resource "kubernetes_config_map" "openclaw_config" {
       tools = {
         profile = "full"
         deny    = []
+        elevated = {
+          enabled = true
+        }
         exec = {
           host        = "gateway"
           security    = "full"
@@ -134,6 +138,10 @@ resource "kubernetes_config_map" "openclaw_config" {
           }
         }
       }
+      commands = {
+        native       = true
+        nativeSkills = true
+      }
       channels = {
         telegram = {
           enabled     = true