fix: setup wizard actually installs tools instead of printing instructions

When user says yes to DefenseClaw, Docker/OpenShell — actually run the
install commands (pip3, brew, curl) instead of just printing URLs.
Verify installation after each step and report success/failure.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: jpleva91

cmd/shellforge/main.go

@@ -19,7 +19,7 @@ import (
 "github.com/AgentGuardHQ/shellforge/internal/scheduler"
 )
 
-var version = "0.3.1"
+var version = "0.3.2"
 
 func main() {
 if len(os.Args) < 2 {
@@ -293,7 +293,17 @@ if _, err := exec.LookPath("defenseclaw"); err != nil {
 fmt.Print("  DefenseClaw (supply chain scanner)? [y/N] ")
 input := readLine(reader)
 if strings.HasPrefix(strings.ToLower(strings.TrimSpace(input)), "y") {
-fmt.Println("  → Install from: https://github.com/cisco-ai-defense/defenseclaw")
+fmt.Println("  → Installing DefenseClaw...")
+if runtime.GOOS == "darwin" {
+run("pip3", "install", "defenseclaw")
+} else {
+run("pip3", "install", "defenseclaw")
+}
+if _, err := exec.LookPath("defenseclaw"); err == nil {
+fmt.Println("  ✓ DefenseClaw installed")
+} else {
+fmt.Println("  ⚠ Install failed — try manually: pip3 install defenseclaw")
+}
 } else {
 fmt.Println("  Skipped")
 }
@@ -307,9 +317,23 @@ fmt.Print("  Docker/OpenShell (sandbox isolation)? [y/N] ")
 input := readLine(reader)
 if strings.HasPrefix(strings.ToLower(strings.TrimSpace(input)), "y") {
 if runtime.GOOS == "darwin" {
-fmt.Println("  → brew install colima docker && colima start")
+fmt.Println("  → Installing Colima + Docker...")
+run("brew", "install", "colima", "docker")
+fmt.Println("  → Starting Colima...")
+run("colima", "start")
+if _, err := exec.LookPath("docker"); err == nil {
+fmt.Println("  ✓ Docker ready (OpenShell compatible)")
+} else {
+fmt.Println("  ⚠ Docker not available after install — check Colima status")
+}
 } else {
-fmt.Println("  → Install Docker: https://docs.docker.com/engine/install/")
+fmt.Println("  → Installing Docker...")
+run("sh", "-c", "curl -fsSL https://get.docker.com | sh")
+if _, err := exec.LookPath("docker"); err == nil {
+fmt.Println("  ✓ Docker installed")
+} else {
+fmt.Println("  ⚠ Install failed — try: https://docs.docker.com/engine/install/")
+}
 }
 } else {
 fmt.Println("  Skipped")