refactor: move BW CLI source to KNELCredsManager repo

org-buildout is docs-only by its own charter; the container-based
Bitwarden CLI (Dockerfile, host wrapper, entrypoint, installer)
belongs in KNELCredsManager alongside other credential tooling.

Files staged in ~/knelcredsmanager-staging/ pending clone/push as
vp-techops. Deployed artifacts (image, ~/.local/bin/bw wrapper) are
unaffected -- they do not read from this repo at runtime.

STATUS.md

@@ -5,7 +5,7 @@
 
 ## Current State
 
-**Phase:** Bitwarden access operational. Container-based CLI (native Rust, no Node.js) deployed and verified. Agent identity provisioning unblocked on BW access — still needs Cloudron invite links and Gitea push credentials.
+**Phase:** All four systems provisioned for vp-techops (Cloudron+2FA, Gitea, Discourse, Redmine) with verified API keys in Bitwarden. 9-agent manifest merged and READY. Session 3 will loop the remaining agents.
 
 **Primary task:** Redmine [#442](https://projects.knownelement.com/issues/442) —
 stand up first 3 AI agent identities (vp-techops, vp-secops, vp-techcompliance).
@@ -15,10 +15,10 @@ stand up first 3 AI agent identities (vp-techops, vp-secops, vp-techcompliance).
 ### This session (TSGCOO) — BW Infrastructure
 - [x] **Bitwarden access operational** — container-based CLI using native Rust binary
       (no Node.js at any layer, CMMC/ITAR/STIG-friendly)
-  - `docker/bw-native/Dockerfile` — minimal debian-slim + bw v2026.7.0
-  - `scripts/bw-cli.sh` — host wrapper (auth lifecycle handled internally)
-  - `scripts/bw-entrypoint.sh` — container entrypoint (config, login, unlock, sync)
-  - `scripts/bw-install.sh` — one-command installer
+  - Source files **moved to KNELCredsManager repo** (staged in
+    `~/knelcredsmanager-staging/` pending clone/push — org-buildout is docs-only).
+    Deployed artifacts unaffected: image `reachableceo-bw-native:2026.7.0`,
+    `~/.local/bin/bw` wrapper, `~/.local/share/bw/entrypoint.sh`.
   - All scripts pass shellcheck (zero warnings, including info-level)
   - Verified: `bw status` (unlocked, coo@turnsys.com @ pwvault.turnsys.com)
 - [x] **Fixed `~/.config/bw/env`:** single-quoted all values (master password