init: fork of kejilion/sh with certbot host-network fix

- Replace 'docker run -p 80:80' with '--network host' for certbot standalone HTTP-01 to avoid timeout in environments where Docker NAT port-publish breaks LE inbound traffic but host port 80 is reachable.
- Applies to kejilion.sh (all locale variants) and auto_cert_renewal.sh.
- README install command points to this Gitea mirror.

run_openclaw_manager_matrix.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")"
+
+IMAGES=(
+  "debian:12"
+  "debian:13"
+  "ubuntu:22.04"
+  "ubuntu:24.04"
+  "rockylinux:9"
+  "almalinux:9"
+  "fedora:41"
+)
+
+install_cmd() {
+  case "$1" in
+    debian:*|ubuntu:*)
+      echo 'apt-get update -y >/dev/null && DEBIAN_FRONTEND=noninteractive apt-get install -y bash jq grep sed coreutils >/dev/null'
+      ;;
+    rockylinux:*|almalinux:*|fedora:*)
+      echo 'dnf install -y bash jq grep sed coreutils >/dev/null'
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+}
+
+for img in "${IMAGES[@]}"; do
+  echo "===== $img ====="
+  cmd=$(install_cmd "$img")
+  if docker run --rm -v "$PWD":/src -w /src "$img" bash -lc "$cmd && bash -n kejilion.sh && ./tests_openclaw_manager_smoke.sh"; then
+    echo "RESULT $img OK"
+  else
+    echo "RESULT $img FAIL"
+  fi
+  echo
+ done