feat(kernel-language-model-service): Add claude code cli

[grypez]

Description

Probably a good idea.

Background

We have an ollama connection. We can route through any command line bot with the right shell.

Sub Issues

• feat: Provide an ocap -> cli compiler. #826
• Start claude code in an apple container
  • Forward/attenuate : auth/login
  • Start a powerless ocap kernel with a bootstrap to the real one

Related

If we / users rely on claude code cli, we can write a plugin to restrict bash to the decidable authority fragment