Replaces the --env-file ~/.creds/*.env pattern with Bitwarden-sourced
credentials. Each agent identity stores its own API keys in a BW
collection; bw-run.sh fetches them at runtime and passes to CLI
containers via a temp env file (cleaned up on exit).
Usage: bw-run.sh <agent> <service> <image> [args...]
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
