Extract OpenClaw gateway client with auth fallback (#407)

- Move gateway connection and handshake logic into a shared client
- Add device-token auth persistence and retry support for Tailscale gateway tests
- Simplify the gateway test to use the new client layer

Author: BunsDev