Add env and secrets passthrough to ClaudeCodeClientConfig

[ElleNajt]

Summary

• Add env and secrets fields to ClaudeCodeClientConfig
• These are merged with the existing api_key_secret when creating the underlying CloudRunClient
• Allows passing additional credentials (e.g., Matrix tokens) to Claude agents

Use case

Passing Matrix credentials to agents so they can message humans during task execution:

config = ClaudeCodeClientConfig(
    project_id="my-project",
    gcs_bucket="my-bucket",
    api_key_secret="anthropic-api-key",
    secrets={
        "MATRIX_ACCESS_TOKEN": "matrix-token-secret",
    },
    env={
        "MATRIX_ROOM_ID": "!roomid:matrix.org",
    },
)

Test plan

• Existing tests pass
• New secrets appear as environment variables in container

🤖 Generated with Claude Code