fix(openclaw): correct misleading consolidation guidance, narrow field type, enforce ID length limit

[Copilot]

discoverAuthStorePaths() only scans per-agent agents/*/agent/auth-profiles.json — never the main store — so agentsWithNoUniqueProfiles means "all profiles duplicated within scanned agents", not "available from main". Cleanup output was incorrectly advising users to delete local auth files and inherit from main without verifying main has those secrets.

src/cli/commands/openclaw-cleanup.ts

• Replaced all 5 "inherit from main" strings across --apply, --audit, and --consolidate output with accurate descriptions (e.g. "These agents only have profiles that are duplicated across other scanned agents", "Review if these agents still need their own auth-profiles.json")

src/openclaw/plan.ts

• MigratableSecret.field: narrowed from string → 'key' | 'token'; existing constructions in migrate.ts already use the literal values so no call-site changes needed
• buildExecProviderId: added truncation to guarantee the returned ID never exceeds 256 chars. Available budget = 256 − "providers/".length(10) − 1 (separator) = 245; split as ⌈245/2⌉ = 123 for provider, ⌊245/2⌋ = 122 for field:

  const available = 256 - 'providers/'.length - 1  // 245
  sanitizedProvider = sanitizedProvider.slice(0, Math.ceil(available / 2))
  sanitizedField    = sanitizedField.slice(0, Math.floor(available / 2))

docs/MIGRATION.md

• Added text language specifier to two unlabelled fenced code blocks (example CLI output ~line 65, ID mapping ~line 232)

---

📱 Kick off Copilot coding agent tasks wherever you are with GitHub Mobile, available on iOS and Android.