fix: review feedback — credentials, portability, smoke test

[antianqi]

What

Addresses the 3 review comments on PR #2 (Add antianqi/openclaw-acp-bridge v0.1.0):

1. Credentials disclosure contradiction — acp-task-dispatch/SKILL.md Failure handling
   used to say "the server is likely down or the auth token is invalid". Reworded to
   "the server is likely down or rejected the request", and explicitly notes this
   Plugin does not embed or manage credentials — $ACP_TOKEN lives in the user's
   environment. The PR's "no credentials" claim is now consistent.

2. Portability (ACP_HOME override was fictional) — both SKILL.md files used to
   contain sys.path.insert(0, r'D:/openclaw-acp/openclaw-skill') (literal hardcoded
   path). Now they read $ACP_HOME first and raise a clear RuntimeError with setup
   instructions if it is unset. macOS / Linux / non-D: Windows installs now work.

3. External server/SDK is a runtime dependency — needs version pin + smoke test —

   • README Requirements pinned to OpenClaw-mcode-ACP v7-bidir or later.
   • Added scripts/smoke.py (PR-reproducible, no MiniMax Code required, ~10s):
     validates $ACP_HOME resolves, SDK imports, /acp/health returns 200, inbox
     write/read roundtrip works, and that no SKILL.md still references hardcoded
     D:/openclaw-acp.
   • Plugin version bumped 0.1.0 → 0.1.1.

Reply to each review point

① 凭据披露互相矛盾

• Plugin 不持有、不生成、不读取任何 token。
• SKILL.md 中"auth token is invalid"措辞已替换为"server rejected the request"，明确说明 token 在用户环境（$ACP_TOKEN）里，Plugin 只发起请求、不知道也不关心凭据本身。
• PR 的"No tokens, credentials, or paid services"声明与代码现在一致。

② 可移植性不成立

• 两个 Skill 的代码示例里 sys.path.insert(0, r'D:/openclaw-acp/openclaw-skill') 已替换为：

  import os, sys
  _acr_root = os.environ.get('ACP_HOME')
  if not _acr_root:
      raise RuntimeError('ACP_HOME env var is not set. Install OpenClaw-mcode-ACP and set ACP_HOME ...')
  sys.path.insert(0, os.path.join(_acr_root, 'openclaw-skill'))

• macOS / Linux / 任意 Windows 盘符都可用；ACP_HOME 不设就明确报错而不是默默失败。
• scripts/smoke.py Check 6 静态扫描所有 SKILL.md 文件，确认没有 hardcoded 路径漏网。

③ 外部 server/SDK 是运行时依赖

• README Requirements 显式声明需要 OpenClaw-mcode-ACP v7-bidir+（之前的 PR 没写最低版本契约）。
• 新增 scripts/smoke.py：在 PR 内可复现，6 项 check：ACP_HOME 解析 / SDK 可导入 / acp_paths 跨平台 / /acp/health 200 / inbox 读写 roundtrip / SKILL.md 无 hardcoded 路径。
• 不依赖 MiniMax Code 本身，可独立运行。

Files changed

 plugins/antianqi/openclaw-acp-bridge/README.md                        |  18 +-
 plugins/antianqi/openclaw-acp-bridge/plugin.json                      |   2 +-
 plugins/antianqi/openclaw-acp-bridge/scripts/smoke.py                 | 187 + (new)
 plugins/.../skills/acp-collab/SKILL.md                                |  11 +-
 plugins/.../skills/acp-task-dispatch/SKILL.md                         |  12 +-

5 files changed, +222 / -8