Fixes
- Stop recreating BOOTSTRAP.md on every daemon startup
- Remove loose bash auto-allow in onboarding to prevent permission bypass
- Renumber duplicate rule in Home Base workspace context
- Guard against undefined htmlDefinition in isPrebuiltHomeBaseApp
- Pass API key to Anthropic client in ride-shotgun watch handler
- Address unaddressed PR review feedback items