fix: address PR review feedback for devcontainer scripts

- Use jq for safe GITHUB_TOKEN interpolation in entrypoint.sh
- Make theme configurable via CLAUDE_THEME env var (default: dark)
- Move trap earlier in run.sh to ensure cleanup on early failures

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: robbycochran

.devcontainer/entrypoint.sh

@@ -3,13 +3,14 @@
 mkdir -p /home/dev/.claude/debug /home/dev/.commandhistory
 
 # Set defaults so Claude Code doesn't prompt on startup
-claude config set --global theme dark 2> /dev/null || true
+claude config set --global theme "${CLAUDE_THEME:-dark}" 2> /dev/null || true
 claude config set --global verbose false 2> /dev/null || true
 
 # Register GitHub MCP server if token is available
 if [[ -n "${GITHUB_TOKEN:-}" ]]; then
     if ! claude mcp add-json github \
-        '{"type":"http","url":"https://api.githubcopilot.com/mcp","headers":{"Authorization":"Bearer '"$GITHUB_TOKEN"'","X-MCP-Toolsets":"context,repos,pull_requests,issues,actions,git"}}' \
+        "$(jq -n --arg token "$GITHUB_TOKEN" \
+            '{"type":"http","url":"https://api.githubcopilot.com/mcp","headers":{"Authorization":("Bearer " + $token),"X-MCP-Toolsets":"context,repos,pull_requests,issues,actions,git"}}')" \
         --scope user 2> /dev/null; then
         echo "WARNING: Failed to register GitHub MCP server" >&2
     fi

.devcontainer/run.sh

@@ -243,6 +243,7 @@ USAGE
     *)
         preflight
         ACTIVE_WORKTREE=$(setup_worktree)
+        trap on_exit EXIT
         BRANCH=$(git -C "$ACTIVE_WORKTREE" branch --show-current)
         TASK="$*"
 
@@ -257,8 +258,6 @@ USAGE
         echo "Task: $TASK"
         echo "---"
 
-        trap on_exit EXIT
-
         build_docker_args "$ACTIVE_WORKTREE"
         PROMPT="/dev-loop $TASK"
         if [[ "$TASK" == /* ]]; then