ClawShell Secures OpenClaw API Keys And PII

ClawShell, a security-privileged process for the OpenClaw ecosystem, sits between OpenClaw and upstream LLM API providers and maps virtual API keys to real provider keys while performing configurable DLP scanning and sender-based email filtering. It stores real credentials in /etc/clawshell, runs under 10MB written in Rust, and provides a sudo onboarding flow plus a drop-in sidecar deployment.