Clarify ISSUE_CORE_API_KEY startup requirement, local dev flow, and that agents must not request the key from ops-warden.