add SSH access to proxy container for ARIA's Bash tool

Claude Code CLI runs in aria-proxy, so Bash commands execute there.
SSH keys and host.docker.internal were only in aria-core — ARIA
couldn't reach aria-wohnung. Now the proxy has SSH client, keys,
and host resolution too.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -4,8 +4,11 @@ services:
   proxy:
     image: node:22-alpine
     container_name: aria-proxy
+    extra_hosts:
+      - "host.docker.internal:host-gateway"        # Zugriff auf die VM via SSH
     command: >-
-      sh -c "npm install -g @anthropic-ai/claude-code claude-max-api-proxy &&
+      sh -c "apk add --no-cache openssh-client &&
+      npm install -g @anthropic-ai/claude-code claude-max-api-proxy &&
       DIST=$(find /usr/local/lib -path '*/claude-max-api-proxy/dist' -type d | head -1) &&
       sed -i 's/startServer({ port })/startServer({ port, host: process.env.HOST || \"127.0.0.1\" })/' $$DIST/server/standalone.js &&
       sed -i 's/if (model\.includes/if ((model||\"claude-sonnet-4\").includes/g' $$DIST/adapter/cli-to-openai.js &&
@@ -15,6 +18,7 @@ services:
       claude-max-api"
     volumes:
       - ~/.config/claude:/root/.config/claude       # Claude CLI Auth (rw fuer Login via Diagnostic)
+      - ./aria-data/ssh:/root/.ssh:ro               # SSH Keys fuer VM-Zugriff (aria-wohnung)
     environment:
       - HOST=0.0.0.0
       - CLAUDE_CODE_BUBBLEWRAP=1                    # Erlaubt --dangerously-skip-permissions als root