feat: route nofxos data requests through claw402 x402 payment

When CLAW402_WALLET_KEY env var is set, all nofxos.ai data API calls
(AI500, OI rankings, NetFlow, price rankings, etc.) are automatically
routed through claw402.ai with x402 USDC payment instead of direct
free access.

- New Claw402DataClient for GET requests with x402 payment flow
- Endpoint mapping: /api/xxx -> /api/v1/nofx/xxx
- MakeClaw402SignFunc helper for reusable payment signing
- Auto-detection: if CLAW402_WALLET_KEY is set, claw402 mode activates
- Fallback: without wallet key, direct nofxos.ai access (backward compatible)

Env vars:
  CLAW402_WALLET_KEY=0x...  # wallet private key for payment
  CLAW402_URL=https://claw402.ai  # optional, defaults to claw402.ai

kernel/engine.go

@@ -6,6 +6,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"net/http"
+	"os"
 	"nofx/logger"
 	"nofx/market"
 	"nofx/provider/hyperliquid"
@@ -194,6 +195,21 @@ func NewStrategyEngine(config *store.StrategyConfig) *StrategyEngine {
 	}
 	client := nofxos.NewClient(nofxos.DefaultBaseURL, apiKey)
 
+	// If claw402 wallet key is available, route nofxos requests through claw402
+	if walletKey := os.Getenv("CLAW402_WALLET_KEY"); walletKey != "" {
+		claw402URL := os.Getenv("CLAW402_URL")
+		if claw402URL == "" {
+			claw402URL = "https://claw402.ai"
+		}
+		claw402Client, err := nofxos.NewClaw402DataClient(claw402URL, walletKey, nil)
+		if err == nil {
+			client.SetClaw402(claw402Client)
+			logger.Infof("🔗 NofxOS data routed through claw402 (%s)", claw402URL)
+		} else {
+			logger.Warnf("⚠️ Failed to init claw402 data client: %v (using direct nofxos.ai)", err)
+		}
+	}
+
 	return &StrategyEngine{
 		config:       config,
 		nofxosClient: client,