refactor: move agent Dockerfiles into their contrib directories

Dockerfile.claude and Dockerfile.codex move from the repo root into
bot_bottle/contrib/claude/Dockerfile and bot_bottle/contrib/codex/Dockerfile
respectively, so all per-provider assets live alongside the provider code.

Closes #215

bot_bottle/backend/docker/capability_apply.py

@@ -126,11 +126,10 @@ def apply_capability_change(slug: str, new_dockerfile: str) -> tuple[str, str]:
 
 
 def _repo_dockerfile_path() -> Path:
-    """Path to the repo's Claude Dockerfile (one dir above this module's
-    package root). Resolved at call time so the path is correct
-    regardless of where this module is imported from."""
-    # bot_bottle/backend/docker/capability_apply.py -> repo root
-    return Path(__file__).resolve().parent.parent.parent.parent / "Dockerfile.claude"
+    """Path to the Claude provider Dockerfile. Resolved at call time so
+    the path is correct regardless of where this module is imported from."""
+    # bot_bottle/backend/docker/ -> bot_bottle/ -> contrib/claude/Dockerfile
+    return Path(__file__).resolve().parent.parent.parent / "contrib" / "claude" / "Dockerfile"
 
 
 def snapshot_transcript(slug: str) -> None:

bot_bottle/backend/docker/prepare.py

@@ -209,17 +209,16 @@ def resolve_plan(
 
     supervise_plan = None
     if bottle.supervise:
-        # Current Dockerfile for the agent image. Read from the repo
-        # root; for `--cwd` derived images the base Dockerfile is what
-        # the agent should propose changes against (the derived layer
-        # is just a workspace copy).
+        # Current Dockerfile for the agent image. For `--cwd` derived
+        # images the base Dockerfile is what the agent should propose
+        # changes against (the derived layer is just a workspace copy).
         # (routes.yaml used to land here too but PRD 0017 chunk 3
         # moved it behind the `list-egress-routes` MCP tool so the
         # agent gets live state rather than a launch-time snapshot.)
         supervise_dockerfile_path = (
             Path(dockerfile_path)
             if dockerfile_path
-            else Path(__file__).resolve().parent.parent.parent.parent / "Dockerfile.claude"
+            else Path(__file__).resolve().parent.parent.parent / "contrib" / "claude" / "Dockerfile"
         )
         dockerfile_content = (
             supervise_dockerfile_path.read_text(encoding="utf-8")