Harden OpenClaw: run openclaw security audit, reduce prompt-injection/exfil risks, scan for secrets, and apply safe hygiene fixes