Add workspace config: docker build files, agent identity, user config, gitignore

config/README.md

@@ -0,0 +1,27 @@
+# Configuration
+
+This directory contains non-secret configuration files that are mounted into the container at `/data/config/`.
+
+## Structure
+
+```
+config/
+├── gateway.yaml          # OpenClaw gateway configuration
+└── gog/                  # gog-specific configs (if any)
+```
+
+## Usage
+
+Files here are mounted read-only into the container. Put your OpenClaw config, tool configs, etc. here.
+
+**NOT for secrets** — use `../secrets/` for API keys, OAuth credentials, etc.
+
+## Example
+
+```yaml
+# config/gateway.yaml
+providers:
+  telegram:
+    enabled: true
+    # ...
+```