fix: make AgentRun CLI a render-only REST client (#263)

Co-authored-by: Codex <codex@noreply.local>

config/agentrun.yaml

@@ -0,0 +1,30 @@
+manager:
+  baseUrl: https://agentrun.74-48-78-17.nip.io/
+  timeoutMs: 15000
+
+publicExposure:
+  enabled: true
+  proxyName: agentrun-v01-frpc
+  remotePort: 22880
+  publicBaseUrl: https://agentrun.74-48-78-17.nip.io/
+  masterBaseUrl: http://127.0.0.1:22880
+  masterFrps:
+    configPath: /opt/hwlab-frp/frps.dev.toml
+    containerName: hwlab-frps-dev
+  masterCaddy:
+    enabled: true
+    domain: agentrun.74-48-78-17.nip.io
+    configPath: /etc/caddy/Caddyfile
+    serviceName: caddy
+    upstreamBaseUrl: http://127.0.0.1:22880
+    responseHeaderTimeoutSeconds: 60
+
+auth:
+  env: HWLAB_API_KEY
+  file: /root/.config/hwlab-v02/master-server-admin-api-key.env
+  header: Authorization
+  scheme: Bearer
+
+client:
+  role: render-only
+  transport: direct-http