feat: ClawTap v0.2.0

Interactive Prompts:
- Unified InteractivePrompt type across all 3 adapters (Claude/Codex/Gemini)
- InteractivePromptOverlay component with options, text input, countdown
- Gemini + Codex pane monitors detect tool confirmation, ask user, plan approval
- respondInteractivePrompt routing: permission → respondPermission, options → _selectOption
- Claude AskUserQuestion nested questions[0] structure parsing

Cross-AI Review:
- Client-generated reviewId, removed pendingReview state
- FloatingReviewPanel uses CSS display:none instead of unmount (keeps hooks alive)
- Child review sessions default to YOLO/bypass permission mode
- Send back to parent, send to existing/new review, tab switching, end review
- Collapsed review cards with read-only panel for ended reviews
- Full reconnect support: active + ended reviews restore correctly

AskUserQuestion Tool Card UI:
- Dedicated renderer replaces raw JSON display
- Options shown with selected (green) / unselected (gray) indicators
- Free text answers shown in quoted format with green border
- Collapsed summary: question → answer
- Shared parseAskQuestionInput utility (client + server)
- Historical tool results attached via _result on tool_use blocks

Adapter Fixes:
- Session→adapter mapping persisted in SQLite (survives server restart)
- SESSION_CREATED deferred for pendingRekey adapters (Codex/Gemini)
- session-rekeyed handler sends complete SESSION_CREATED with adapter + cwd
- Gemini: auto-accept folder trust, privacy notice, IDE nudge, YOLO * prompt
- Claude: auto-accept bypass permissions confirmation (v2.1.85+)
- Port fallback (EADDRINUSE → try +1), statusLine shell script wrapper

Other:
- Desktop Enter sends / Shift+Enter newline; Mobile Enter newline
- Strip CLAWTAP_REF marker from session list
- Active sessions tab shows adapter badge
- Rename CLAUDE_UI_PASSWORD → CLAWTAP_PASSWORD

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

bin/clawtap

@@ -217,20 +217,20 @@ ensure_server() {
   fi
 
   # Password is required
-  if [ -z "$CLAUDE_UI_PASSWORD" ]; then
+  if [ -z "$CLAWTAP_PASSWORD" ]; then
     echo "ClawTap server not running."
     echo ""
     echo "Set a password and try again:"
-    echo "  export CLAUDE_UI_PASSWORD=your-password"
+    echo "  export CLAWTAP_PASSWORD=your-password"
     echo "  clawtap"
     echo ""
     echo "Or start the server separately:"
-    echo "  CLAUDE_UI_PASSWORD=your-password npm start"
+    echo "  CLAWTAP_PASSWORD=your-password npm start"
     exit 1
   fi
 
   echo "Starting ClawTap server on port $PORT..."
-  CLAUDE_UI_PASSWORD="$CLAUDE_UI_PASSWORD" PORT="$PORT" \
+  CLAWTAP_PASSWORD="$CLAWTAP_PASSWORD" PORT="$PORT" \
     nohup npx tsx "$SERVER_DIR/server/index.ts" >"$HOME/.clawtap/server.log" 2>&1 &
   SERVER_PID=$!
 
@@ -252,7 +252,7 @@ ensure_server
 # Authenticate with the ClawTap server API
 get_auth_token() {
   local BODY
-  BODY=$(printf '%s' "$CLAUDE_UI_PASSWORD" | python3 -c 'import sys,json; print(json.dumps({"password": sys.stdin.read()}))' 2>/dev/null)
+  BODY=$(printf '%s' "$CLAWTAP_PASSWORD" | python3 -c 'import sys,json; print(json.dumps({"password": sys.stdin.read()}))' 2>/dev/null)
   curl -sk -X POST "${PROTOCOL}://localhost:${PORT}/api/auth/login" \
     -H "Content-Type: application/json" \
     -d "$BODY" 2>/dev/null | \