refactor(docker): drop legacy names from capability_apply teardown

Last of the per-sidecar legacy names. `_per_bottle_container_names`
used to list the four pre-bundle sidecars (cred-proxy, pipelock,
git-gate, supervise) so capability-apply's teardown would force-rm
them on remediation. None of those containers exist anymore — the
four daemons run in the sidecar bundle (PRD 0024), so the list
collapses to the agent + the bundle.

Integration test follows: the fake supervise-sidecar setup, which
existed to give teardown an extra container to clean up, switches
to a fake sidecar bundle with the current name.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

tests/integration/test_capability_apply.py

@@ -39,6 +39,9 @@ from claude_bottle.backend.docker.network import (
     network_create_internal,
     network_remove,
 )
+from claude_bottle.backend.docker.sidecar_bundle import (
+    sidecar_bundle_container_name,
+)
 from tests._docker import skip_unless_docker
 
 
@@ -101,9 +104,9 @@ class TestCapabilityApply(unittest.TestCase):
             capture_output=True, text=True, check=False,
         )
         self.assertEqual(0, r.returncode, r.stderr)
-        # Also start a fake supervise sidecar so teardown has something
+        # Also start a fake sidecar bundle so teardown has something
         # extra to clean up (mirrors a real bottle's container set).
-        sidecar = f"claude-bottle-supervise-{self.slug}"
+        sidecar = sidecar_bundle_container_name(self.slug)
         subprocess.run(
             [
                 "docker", "run", "-d",