[vrajp-lyzr]

Stacked on #22. Four commits, each passing the suite on its own.

1. feat(harness)!: verbose COMPUTER_AGENT_* settings; the app server takes the agent and token per session

• Rename. The settings' environment variables are renamed so each says what it is. Constructor arguments are unchanged, and no old name is read.
• Per-session values. Old CAS now passes COMPUTER_AGENT_EGRESS_PROXY_SECRET and COMPUTER_AGENT_ID in POST /v1/sessions envs. The app server seeds the token from the first and builds the session's agent from the second, falling back to the image's own COMPUTER_AGENT_ID.

Was	Now
COMPUTERAGENT_AGENT_ID	COMPUTER_AGENT_ID
COMPUTERAGENT_ENGINE	COMPUTER_AGENT_ENGINE
LYZR_API_KEY	COMPUTER_AGENT_EGRESS_PROXY_SECRET
COMPUTERAGENT_BASE_URL	COMPUTER_AGENT_EGRESS_API_URL
COMPUTERAGENT_{LLM,MCP,GUARDRAILS,TELEMETRY,SESSION_STORE}_URL	COMPUTER_AGENT_EGRESS_{…}_URL
COMPUTERAGENT_GAP_DIR	COMPUTER_AGENT_GAP_DIR

2. fix(server): keep the SSE stream open across keepalives

• Bug. asyncio.wait_for(frames.__anext__(), 20 s) cancelled the EventLog generator on a timeout. A cancelled async generator is finished, so the stream ended right after the first :keepalive. On Lambda MicroVM, CAS reported STREAM_UPSTREAM_LOST on any 20 s quiet gap.
• Fix. EventLog.iterate now owns the keepalive and yields None when it expires.
• Test. test_a_quiet_gap_keeps_the_stream_open fails on the old code (assert 1 >= 2) and passes now.

3. feat(harness): key the session store by session_id

• Bug. The store was keyed by the Claude CLI's per-process UUID, so a new sandbox started blank. agentos expects the CAS session id (old-CAS plan 10).
• Store. With session_id=, PinnedSessionStore puts that id on every append and load; project_key and subpath are kept.
• CLI id. The CLI runs under uuid5(session_id). On a process's first turn the engine loads the store once: if nothing is stored it starts a new conversation under that UUID, otherwise it resumes. Every sandbox for a conversation then uses the same CLI UUID.
• Scope. The app server already passes session_id = the CAS sessionId. Without session_id, nothing changes.
• Checked: claude_agent_sdk's own materialize_resume_session loads the pinned row under the derived UUID.

4. docs(examples)

• examples/agentcore_runtime/ and examples/lambda_microvm/: the SDK app server, with a baked .env holding the egress routes and the engine.
• docs/DEPLOYING_ON_AGENTCORE_AND_MICROVM.md: integrating the SDK, building the image, create-microvm-image / create-agent-runtime, and pointing an AgentOS agent at it.

Testing

• pytest -m "not integration": 669 passed.
• ruff: clean.
• mypy: 18 errors, all already on the base branch.