fw: A8 template migration (drop on_fail: continue) and cp-docs-token/v1 layer (be110e25, 1d7ef09a)

Claude-Session: https://claude.ai/code/session_01N218bERyNeLhbLmDRDvbWF

harnesses/contexts/cp-docs-token/v1/harness.yaml

@@ -0,0 +1,16 @@
+kind: context
+name: cp-docs-token
+version: 1
+description: "Step-docs mode env contract for lib.cp_cli (PLN-CLI-16): per-step wfcd_ token file and CA file delivered by the dispatcher; document access scoped to this step's item (spec/dispatcher.md D-40, spec/authentication.md AU-59)"
+requires: []
+provides: [cp-docs-token]
+
+# Env-only layer: the dispatcher delivers the token and CA files into the
+# container; this layer sets only the paths. No secrets_required, no init script.
+env:
+  CP_DOCS_TOKEN_FILE: /run/agent/cp-docs/token
+  CP_DOCS_CA_FILE: /run/agent/cp-docs/ca.crt
+
+context_files:
+  - source: ./CLAUDE.md
+    target: /opt/harness/context/cp-docs-token/CLAUDE.md