fix: align claude cli permissions with exec policy

Derive Claude CLI bypass mode from OpenClaw exec YOLO policy, preserve raw Claude permission-mode overrides, update docs/changelog, and cover global/per-agent policy behavior.

test/helpers/agents/prompt-composition-scenarios.ts

@@ -57,8 +57,8 @@ function buildCommonSystemParams(workspaceDir: string) {
       os: "Darwin 24.0.0",
       arch: "arm64",
       node: process.version,
-      model: "anthropic/claude-sonnet-4-5",
-      defaultModel: "anthropic/claude-sonnet-4-5",
+      model: "anthropic/claude-sonnet-4-6",
+      defaultModel: "anthropic/claude-sonnet-4-6",
       shell: "zsh",
     },
     userTimezone: "America/Los_Angeles",

test/helpers/plugins/provider-discovery-contract.ts

@@ -636,7 +636,7 @@ export function describeCloudflareAiGatewayProviderDiscoveryContract(
           baseUrl: "https://gateway.ai.cloudflare.com/v1/acc-123/gw-456/anthropic",
           api: "anthropic-messages",
           apiKey: "CLOUDFLARE_AI_GATEWAY_API_KEY",
-          models: [expect.objectContaining({ id: "claude-sonnet-4-5" })],
+          models: [expect.objectContaining({ id: "claude-sonnet-4-6" })],
         },
       });
     });