Add ISSUE_CORE_URL, ISSUE_CORE_API_KEY, and ISSUE_SINK_TYPE guidance so agents pair keys locally or via OpenBao instead of requesting them from ops-warden.