fix(b22b): retarget composites + delete stale anthropic-cloud/v1

Phase 8 cutover (M22) renamed the anthropic harness from anthropic-cloud
→ anthropic-cloud-paul-oauth in agent-runtimes, but the equivalent
rename in this framework's composites and the deletion of the stale
SOPS-era anthropic-cloud/v1 dir were never done. Every cloud-Anthropic
composite (haiku/sonnet/opus code, planning, security-review, spec-
writing, test-writing, best-practices) layered the dead context and
silently never resolved a credential.

- Update 14 composites to layer anthropic-cloud-paul-oauth/v1
- Delete the orphaned harnesses/contexts/anthropic-cloud/v1/ directory
  (used pre-Phase-9 SOPS file delivery; now obsolete)

Closes BUG-22b. Pairs with the live PATCH /v1/accounts/{id} rename
shipped under BUG-22a.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

harnesses/composites/best-practices-opus-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Best practices review agent with Opus + repo clone via SSH"
 
 layers:
   - context: best-practices/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/code-haiku-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Code agent with Haiku (Anthropic cloud) + repo clone via SSH"
 
 layers:
   - context: code-methodology/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/code-haiku-tdd-repo/v1/harness.yaml

@@ -5,7 +5,7 @@ description: "Haiku code agent with TDD enforcement — tests locked read-only,
 
 layers:
   - context: code-methodology/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1
   - context: tdd-protect/v1

harnesses/composites/code-opus-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Code agent with Opus (Anthropic cloud) + repo clone via SSH"
 
 layers:
   - context: code-methodology/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/code-opus-tdd-repo/v1/harness.yaml

@@ -5,7 +5,7 @@ description: "Opus code agent with TDD enforcement — tests locked read-only, m
 
 layers:
   - context: code-methodology/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1
   - context: tdd-protect/v1

harnesses/composites/code-sonnet-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Code agent with Sonnet (Anthropic cloud) + repo clone via SSH"
 
 layers:
   - context: code-methodology/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/code-sonnet-tdd-repo/v1/harness.yaml

@@ -5,7 +5,7 @@ description: "Sonnet code agent with TDD enforcement — tests locked read-only,
 
 layers:
   - context: code-methodology/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1
   - context: tdd-protect/v1

harnesses/composites/planning-opus-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Planning agent with Opus (Anthropic cloud) + repo clone via SSH"
 
 layers:
   - context: planning/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/security-review-opus-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Security review agent with Opus + repo clone via SSH"
 
 layers:
   - context: security-review/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/security-review-sonnet-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Security review agent with Sonnet + repo clone via SSH"
 
 layers:
   - context: security-review/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/spec-writing-opus-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Spec writing agent with Opus + repo clone via SSH"
 
 layers:
   - context: spec-writing/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/spec-writing-sonnet-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Spec writing agent with Sonnet + repo clone via SSH"
 
 layers:
   - context: spec-writing/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/test-writing-opus-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Test writing agent with Opus + repo clone via SSH"
 
 layers:
   - context: test-writing/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/composites/test-writing-sonnet-repo/v1/harness.yaml

@@ -5,6 +5,6 @@ description: "Test writing agent with Sonnet + repo clone via SSH"
 
 layers:
   - context: test-writing/v1
-  - context: anthropic-cloud/v1
+  - context: anthropic-cloud-paul-oauth/v1
   - context: gitea-ssh/v1
   - context: agent-repo/v1

harnesses/contexts/anthropic-cloud/v1/harness.yaml

@@ -1,14 +0,0 @@
-kind: context
-name: anthropic-cloud
-version: 1
-description: "Anthropic cloud — subscription OAuth token + pricing enforcement"
-requires: []
-provides: [claude-code]
-
-env:
-  ENFORCE_SUBSCRIPTION_PRICING: "true"
-
-secrets_files:
-  - source: ./provider.sops.env
-    target: /opt/harness/secrets/anthropic-cloud/provider.sops.env
-    encrypted: true