fix: mount openclaw routes at /openclaw prefix + fix docker.client wrapper + strip duplicate /apps/ paths across sub-routers

- openClawRoutes was mounted at root causing /status vs /openclaw/status mismatch
- ctx.docker is a typed wrapper {client,pull,...} — all calls now use docker.client.*
- templates/deploy/removal/restore sub-routers had /apps/ hardcoded in inner routes
  causing double-stacking when mounted under /apps (→ /apps/apps/templates etc)
- openclaw.js: GET /status, POST /deploy, GET/POST /proxy/*, DELETE /

dashcaddy-api/routes/apps/deploy.js

@@ -227,7 +227,7 @@ module.exports = function({ docker, caddy, credentialManager, servicesStateManag
   }
 
   // Check for existing container before deployment
-  router.post('/apps/check-existing', asyncHandler(async (req, res) => {
+  router.post('/check-existing', asyncHandler(async (req, res) => {
     const { appId } = req.body;
     const template = ctx.APP_TEMPLATES[appId];
     if (!template) throw new ValidationError('Invalid app template');
@@ -240,7 +240,7 @@ module.exports = function({ docker, caddy, credentialManager, servicesStateManag
   }, 'check-existing'));
 
   // Deploy new app
-  router.post('/apps/deploy', asyncHandler(async (req, res) => {
+  router.post('/deploy', asyncHandler(async (req, res) => {
     const { appId, config } = req.body;
     if (!appId || typeof appId !== 'string') {
       throw new ValidationError('appId is required');