Trim one trailing space from the four arrow/HTTPS rows and add one dash to the bottle-container bottom edge so all box-bound lines are 68 columns.
Per-bottle reverse proxy that holds API tokens (Anthropic OAuth, GitHub PAT, Gitea PAT, npm) in a root-owned process; agent gets only URLs in its environ. AWS / SigV4 explicitly out of scope.