cli-bridge — issue CLI bundles for the user's own binary This skill mints a fresh AKM key ( ) on the local clawd, then registers it with sc-chatroom in exchange for a short opaque code ( sc xxxxxxxx ). The bundle handed to the user contains only that short code — never the AKM secret, never the Fly machine id. Why a short code instead of the raw AKM? Earlier versions baked the AKM secret + Fly machine id into the bundle directly. That worked but had two downsides — the bundle leaked routing metadata when decoded, and any party that ever held the bundle held a permanent AKM secret. The short-c…