fix(shell): refresh Claude OAuth token per CLI launch

[skulidropek]

Summary

• fix Claude auth propagation for already-running dev containers
• add a lightweight claude wrapper in generated entrypoint that refreshes CLAUDE_CODE_OAUTH_TOKEN from $CLAUDE_CONFIG_DIR/.oauth-token on each invocation
• keep profile export in sync by loading/unsetting token dynamically
• extend entrypoint template tests in app/docker-git packages

Why

Issue #72 reports that Claude Code still asks for login method instead of reusing auth. Root cause was token export happening only at container startup; after auth claude login, existing shell sessions could keep stale token env.

Validation

• pnpm --filter @effect-template/lib build
• pnpm --filter @effect-template/lib typecheck
• pnpm --filter @prover-coder-ai/docker-git typecheck
• pnpm --filter @effect-template/docker-git typecheck
• pnpm vitest run tests/core/templates.test.ts (workdir: packages/docker-git)
• pnpm vitest run tests/docker-git/entrypoint-auth.test.ts (workdir: packages/app)

Closes #72