fix: contain attended OpenBao login output

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0290b-3241-74c3-b868-6049545af836

src/warden/worker.py

@@ -588,7 +588,13 @@ def draft_route_answer(query: str) -> str:
     elif e.has_native_exec:
         parts.append(f"Primary: {e.exec_command}.")
     elif e.exec_capable:
-        parts.append(f"Proxy: warden access {e.id} --fetch (as the caller).")
+        if e.lane == "login":
+            parts.append(
+                f"Contained login: warden access {e.id} --exec -- "
+                "<reviewed-command>."
+            )
+        else:
+            parts.append(f"Proxy: warden access {e.id} --fetch (as the caller).")
     parts.append(f"See {e.wiki_ref}.")
     return " ".join(parts)