feat: authenticate via public-api gateway instead of OpenShift API

[jeremyeder]

Summary

• Replaces direct OpenShift API authentication with HTTP requests to public-api gateway
• Removes oc CLI dependency entirely
• Reduces codebase by ~2,300 lines (from complex K8s operations to simple HTTP calls)
• Aligns with platform security model where public-api is the single entry point

Changes

File	Change
client.py	Rewrite to use httpx for HTTP requests to /v1/sessions endpoints
settings.py	ClusterConfig.server now points to public-api URL (e.g., https://public-api-ambient.apps.cluster.example.com)
server.py	Reduce from 20+ tools to 7 supported tools
formatters.py	Remove unused formatters
pyproject.toml	Replace aiohttp with httpx, update description/keywords

Supported Tools

1. acp_list_sessions - List/filter sessions
2. acp_get_session - Get session by ID
3. acp_delete_session - Delete session (with dry-run)
4. acp_bulk_delete_sessions - Delete up to 3 sessions
5. acp_list_clusters - List configured clusters
6. acp_whoami - Check auth status
7. acp_switch_cluster - Switch cluster context

Configuration

# ~/.config/acp/clusters.yaml
clusters:
  production:
    server: https://public-api-ambient.apps.cluster.example.com
    default_project: my-workspace
    token: sha256~xxx  # or set ACP_TOKEN env var

default_cluster: production

Test plan

• Verify acp_list_sessions returns sessions from public-api
• Verify acp_delete_session with dry_run=true shows preview
• Verify acp_delete_session actually deletes
• Verify auth errors propagate correctly

🤖 Generated with Claude Code