feat: pass Claude OAuth token through to dind template

Adds claude_code_oauth_token variable to coder/main.tf and passes it
from GitHub secrets via the push-template workflow.

Author: noeljackson

.github/workflows/push-template.yaml

@@ -19,4 +19,5 @@ jobs:
           CODER_URL: https://noel.codespace.sh
           CODER_SESSION_TOKEN: ${{ secrets.CODER_TOKEN }}
         run: |
-          coder templates push example --directory coder --yes
+          coder templates push example --directory coder --yes \
+            --variable claude_code_oauth_token="${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}"

coder/main.tf

@@ -1,11 +1,18 @@
 # Example App - TanStack Start demo for codespace.sh
 # Consumes the dind template module
 
+variable "claude_code_oauth_token" {
+  type      = string
+  sensitive = true
+  default   = ""
+}
+
 module "workspace" {
   source = "git::https://github.com/codespacesh/templates.git//dind/module"
 
-  project_name = "example"
-  git_repos    = { "example" = "https://github.com/codespacesh/example" }
+  project_name           = "example"
+  git_repos              = { "example" = "https://github.com/codespacesh/example" }
+  claude_code_oauth_token = var.claude_code_oauth_token
 
   services = {
     app = { port = 5173, public = true, healthcheck = true, healthcheck_path = "/healthz" }