fix: suppress dist-patch warning when native plugin covers all tools

When the before_tool_call plugin is installed, it intercepts read/write/edit
along with all other tool calls. Dist patches for file tools are fully
redundant in this case. Update distPatched to treat plugin as equivalent,
and show a clearer success message distinguishing plugin vs patch coverage.

Author: clap [bot]

cmd/rampart/cli/doctor.go

@@ -896,14 +896,20 @@ func doctorFileToolPatches(emit emitFn) (warnings int) {
 
 	// Check if OpenClaw uses bundled dist files (#204).
 	if openclawUsesBundledDist() {
-		distPatched := openclawDistPatched()
+		// With the native plugin, before_tool_call intercepts all tools including
+		// read/write/edit — dist patches are fully redundant.
+		distPatched := openclawDistPatched() || pluginInstalled
 		webFetchPatched := openclawWebFetchPatched() || pluginInstalled
 		browserPatched := openclawBrowserPatched() || pluginInstalled
 		messagePatched := openclawMessagePatched() || pluginInstalled
 		execPatched := openclawExecPatched() || pluginInstalled
 
 		if distPatched && webFetchPatched && browserPatched && messagePatched && execPatched {
-			emit("Tool patches", "ok", "All OpenClaw tools patched (read/write/edit + web_fetch + browser + message + exec)")
+			if pluginInstalled {
+				emit("Tool patches", "ok", "All OpenClaw tools covered (native plugin: read/write/edit + web_fetch + browser + message + exec)")
+			} else {
+				emit("Tool patches", "ok", "All OpenClaw tools patched (read/write/edit + web_fetch + browser + message + exec)")
+			}
 			return 0
 		}