fix: stale trace examples in usage/changelog, config-home peek respects --

Per review on #428:
- usage() trace example and CHANGELOG #418 entry updated to put --trace
  before --
- config-home --auth-with peek stops at the -- sentinel so a post-side
  --auth-with (agent's own flag) doesn't suppress the missing-dir warning

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lroolle

CHANGELOG.md

@@ -19,7 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   declared adjacent — a cctrace-only bump no longer rebuilds the npm
   agent layer or (rust image) the Playwright layer (#419)
 - `--trace` for codex and grok via cctrace client profiles (#418).
-  `deva codex -- --trace exec "..."` / `deva grok -- --trace -p "..."`
+  `deva codex --trace -- exec "..."` / `deva grok --trace -- -p "..."`
   wrap the agent with `cctrace <client> --no-open --`; always MITM capture
 - Container-scoped CA trust for traced sessions (#414): the entrypoint
   installs the cctrace MITM CA into the container system store when

deva.sh

@@ -203,7 +203,7 @@ Examples:
 
 Advanced:
   deva.sh codex -v ~/.ssh:/home/deva/.ssh:ro -- -m gpt-5-codex
-  deva.sh claude -- --trace --continue   # Trace requests with cctrace
+  deva.sh claude --trace -- --continue   # Trace requests with cctrace
   deva.sh --show-config                  # Debug configuration
   deva.sh --no-docker claude             # Disable Docker-in-Docker auto-mount
 USAGE
@@ -3414,8 +3414,13 @@ fi
 # Warn if explicit --config-home is missing the agent's auth directory.
 # Only warn for default OAuth flows — api-key/bedrock/vertex/copilot don't need local auth dirs.
 # Peek at AGENT_ARGV + AGENT_ARGS to detect --auth-with before agent_prepare() runs.
+# Only scan before the -- sentinel; post-side --auth-with belongs to the
+# agent CLI and must not suppress the missing-dir warning (#427).
 _config_home_uses_default_auth=true
 for _arg in "${AGENT_ARGV[@]+"${AGENT_ARGV[@]}"}" "${AGENT_ARGS[@]+"${AGENT_ARGS[@]}"}"; do
+    if [ "$_arg" = "--" ]; then
+        break
+    fi
     if [ "$_arg" = "--auth-with" ]; then
         _config_home_uses_default_auth=false
         break