NanoClaw's Deterministic Security Layer

OpenClaw's security model relies on the LLM to enforce trust. We built a deterministic layer using NanoClaw's kernel primitives (canUseTool gates, container isolation, pipeline sanitization) to take that responsibility away from the model entirely.