OpenClaw onboarding

Run atmem openclaw install, inspect the generated shadow plan, then run atmem control verify --probe before atmem control activate.