feat(tools): add filesystem tools crate with glob pattern support

- Add new tools-fs crate with read, glob, and grep utilities
- Fix glob command to support actual glob patterns (**, *) instead of just directory walking
- Rename binary from "code" to "owlen" to match package name
- Fix test to reference correct binary name "owlen"
- Add API key support to OllamaClient for authentication

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

crates/llm/ollama/src/client.rs

@@ -8,6 +8,7 @@ use thiserror::Error;
 pub struct OllamaClient {
     http: Client,
     base_url: String,  // e.g. "http://localhost:11434"
+    api_key: Option<String>,  // For Ollama Cloud authentication
 }
 
 #[derive(Debug, Clone, Default)]
@@ -31,9 +32,15 @@ impl OllamaClient {
         Self {
             http: Client::new(),
             base_url: base_url.into().trim_end_matches('/').to_string(),
+            api_key: None,
         }
     }
 
+    pub fn with_api_key(mut self, api_key: impl Into<String>) -> Self {
+        self.api_key = Some(api_key.into());
+        self
+    }
+
     pub fn with_cloud() -> Self {
         // Same API, different base
         Self::new("https://ollama.com")
@@ -52,7 +59,14 @@ impl OllamaClient {
         }
         let url = format!("{}/api/chat", self.base_url);
         let body = Body {model: &opts.model, messages, stream: true};
-        let resp = self.http.post(url).json(&body).send().await?;
+        let mut req = self.http.post(url).json(&body);
+
+        // Add Authorization header if API key is present
+        if let Some(ref key) = self.api_key {
+            req = req.header("Authorization", format!("Bearer {}", key));
+        }
+
+        let resp = req.send().await?;
         let bytes_stream = resp.bytes_stream();
 
         // NDJSON parser: split by '\n', parse each as JSON and stream the results