Final cleanup of k3s config and Docker leak protection

- Restored config/ exclusion in .dockerignore.
- Deduplicated tool whitelist in k3s/configmap.yaml.
- Standardized provider default in agents.defaults for better protocol resolution.

.dockerignore

@@ -2,7 +2,7 @@
 .gitignore
 build/
 .picoclaw/
-# config/
+config/
 .env
 .env.example
 *.md

k3s/configmap.yaml

@@ -15,7 +15,7 @@ data:
           "workspace": "",
           "restrict_to_workspace": true,
           "allow_read_outside_workspace": false,
-          "provider": "openai",
+          "provider": "",
           "model_name": "gemini-2.0-flash",
           "max_tokens": 32768,
           "max_tool_iterations": 50,
@@ -576,7 +576,6 @@ data:
           "weather",
           "summarize",
           "github",
-          "github",
           "monday",
           "harvest",
           "hdn-server"