refactor(sidecars): bundle is the only shape (PRD 0024 chunk 5)

The CLAUDE_BOTTLE_SIDECAR_BUNDLE feature flag is gone. Every
bottle ships with the agent + bundle pair — no opt-in, no legacy
four-sidecar fallback.

Changes:

- Renderer (compose.py): bottle_plan_to_compose unconditionally
  emits {agent, sidecars}. Deleted _pipelock_service,
  _git_gate_service, _egress_service, _supervise_service helpers.
  _agent_service.depends_on collapses to ["sidecars"].

- sidecar_bundle.py: deleted sidecar_bundle_enabled (the flag
  parser). SIDECAR_BUNDLE_IMAGE + container-name helper stay.

- pipelock_apply.py: docker cp + docker restart now target
  sidecar_bundle_container_name(slug). Bundle restart bounces
  all four daemons together (per-daemon reload is the eventual
  feature, not v1).

- Per-sidecar modules trimmed:
  - egress.py: dropped EGRESS_IMAGE, EGRESS_DOCKERFILE,
    build_egress_image, egress_url. Kept EGRESS_PORT, CA paths,
    egress_container_name (still used by the renderer's network
    aliases).
  - git_gate.py: dropped GIT_GATE_IMAGE, GIT_GATE_DOCKERFILE,
    build_git_gate_image. Kept git_gate_host + GIT_GATE_PORT.
  - supervise.py: dropped SUPERVISE_IMAGE, SUPERVISE_DOCKERFILE,
    build_supervise_image, supervise_url.

- Deleted Dockerfile.{egress,git-gate,supervise}. The bundle's
  Dockerfile.sidecars is the only sidecar image now.

- test_compose.py: deleted TestPipelockAlwaysPresent,
  TestConditionalGitGate, TestConditionalEgress,
  TestConditionalSupervise, TestFullMatrix (legacy-shape only),
  TestSidecarBundleFlag (flag is gone). TestSidecarBundleShape
  drops its patch.dict wrapper. TestAgentAlwaysPresent's
  depends_on cases collapse to one.

- test_pipelock_apply.py: bringup container name uses
  sidecar_bundle_container_name(slug) to match the production
  target.

- README.md Architecture section rewritten to describe the
  agent + bundle pair.

Net: -626 lines.

Test status: 498 unit + 27 integration + 1 skipped (chunk-4
pending — superseded by this chunk's rewrite). Locally verified
end-to-end bottle launch produces exactly 2 containers
(claude-bottle-<slug> + claude-bottle-sidecars-<slug>).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

claude_bottle/backend/docker/egress.py

@@ -15,20 +15,11 @@ from pathlib import Path
 
 from ...egress import Egress
 from ...log import die
-from . import util as docker_mod
 
 
-
-
-EGRESS_IMAGE = os.environ.get(
-    "CLAUDE_BOTTLE_EGRESS_IMAGE",
-    "claude-bottle-egress:latest",
-)
-
-EGRESS_DOCKERFILE = "Dockerfile.egress"
-
-# Listening port inside the sidecar. The agent's HTTP_PROXY env var
-# resolves to `http://egress:<port>`.
+# Listening port the egress daemon binds inside the bundle. The
+# agent's HTTP_PROXY env var resolves to `http://egress:<port>`,
+# and the bundle's network aliases route `egress` to itself.
 EGRESS_PORT = int(os.environ.get("CLAUDE_BOTTLE_EGRESS_PORT", "9099"))
 
 # In-container path for mitmproxy's CA. The format is a single PEM
@@ -41,33 +32,15 @@ EGRESS_PIPELOCK_CA_IN_CONTAINER = (
     "/home/mitmproxy/.mitmproxy/pipelock-ca.pem"
 )
 
-# Repo root, for `docker build` context. Resolved from this file's
-# location: claude_bottle/backend/docker/egress.py → repo root.
-_REPO_DIR = str(Path(__file__).resolve().parent.parent.parent.parent)
-
 
 def egress_container_name(slug: str) -> str:
+    """The legacy per-sidecar container name. Kept as a function so
+    the renderer can register it as a docker-network alias on the
+    bundle — any code still referring to `claude-bottle-egress-<slug>`
+    resolves to the bundle's IP."""
     return f"claude-bottle-egress-{slug}"
 
 
-def egress_url() -> str:
-    """Base URL the agent will dial via HTTP_PROXY (chunk 2). Stable
-    across bottles because the sidecar attaches `--network-alias
-    egress` on the internal network; the container name (which
-    carries the slug) is not referenced by agent-side config."""
-    return f"http://{EGRESS_HOSTNAME}:{EGRESS_PORT}"
-
-
-def build_egress_image() -> None:
-    """Build the egress image from `Dockerfile.egress`.
-    Called by `DockerEgress.start`; exposed at module level so
-    integration tests can build it without running the full launch
-    pipeline."""
-    docker_mod.build_image(
-        EGRESS_IMAGE, _REPO_DIR, dockerfile=EGRESS_DOCKERFILE,
-    )
-
-
 def egress_tls_init(stage_dir: Path) -> tuple[Path, Path]:
     """Mint the per-bottle egress MITM CA via host `openssl req`.