Use Claude subscription auth (CLAUDE_CODE_OAUTH_TOKEN) instead of API billing

.env.example

@@ -16,8 +16,10 @@ GITEA_WEBHOOK_SECRET=
 # Image the agent runs from — built and pushed by .gitea/workflows/build.yml
 GITEA_REGISTRY_IMAGE=gitea.apps.williamturner.eu/<your-gitea-username>/<repo-name>/claude-agent:latest
 
-# --- anthropic ---
-ANTHROPIC_API_KEY=
+# --- claude ---
+# Run `claude setup-token` interactively (needs a browser + Claude Pro/Max subscription)
+# to generate this — it's a long-lived OAuth token, not an API key.
+CLAUDE_CODE_OAUTH_TOKEN=
 
 # --- matrix bot ---
 MATRIX_HOMESERVER_URL=https://matrix.apps.williamturner.eu