tes
2f14b6c40a
NATS's authorization.users entries don't accept a `token` field (only `user+password`, `nkey`, or JWT). `token` at the top of the authorization block is a single global token. NATS was crash-looping with "unknown field 'token'" at line 20 col 32 of nats-server.conf. Wire the NATS_VOLCANIC_AGENTS_TOKEN env var through the password field instead. Env-var name stays the same — semantically the value is still a bearer token, only the NATS field it's carried in changes. CLAUDE.md and credentials.local.json updated accordingly.