fix: [nomad-step-4] S4-fix-6 — bake Claude CLI into agents Docker image (remove host bind-mount) (#984)

docker/agents/Dockerfile

@@ -1,7 +1,7 @@
 FROM debian:bookworm-slim
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    bash curl git jq tmux python3 python3-pip openssh-client ca-certificates age shellcheck procps gosu \
+    bash curl git jq tmux nodejs npm python3 python3-pip openssh-client ca-certificates age shellcheck procps gosu \
     && pip3 install --break-system-packages networkx tomlkit \
     && rm -rf /var/lib/apt/lists/*
 
@@ -18,8 +18,9 @@ ARG TEA_VERSION=0.9.2
 RUN curl -fsSL "https://dl.gitea.com/tea/${TEA_VERSION}/tea-${TEA_VERSION}-linux-amd64" \
     -o /usr/local/bin/tea && chmod +x /usr/local/bin/tea
 
-# Claude CLI is mounted from the host via docker-compose volume.
-# No internet access to cli.anthropic.com required at build time.
+# Install Claude Code CLI — agent runtime for all LLM backends (llama, Claude API).
+# The CLI is the execution environment; ANTHROPIC_BASE_URL selects the model provider.
+RUN npm install -g @anthropic-ai/claude-code@2.1.84
 
 # Non-root user
 RUN useradd -m -u 1000 -s /bin/bash agent