I locked down my OpenClaw agent with Claude Code – then dared it to escape ZDNET