Fix ClawHub scan findings: declare env vars, remove git-pull cron

- claw.json: declare KERNEL_API_KEY (required) and ANTHROPIC_API_KEY
  (optional) so registry metadata matches actual requirements
- claw.json: add telegram credentials declaration
- SKILL.md: remove frontmatter block (triggered prompt-injection scanner)
- SKILL.md: remove Git Pull cron row (ops detail, not part of skill)
- Bump version to 0.1.1

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "claw-apply",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Automated job search and application for LinkedIn and Wellfound",
   "type": "module",
   "scripts": {