fix(server): wrap the shared client-name alternation like claudewatcher does (#209)

The deployment injects CLAUDE_INGEST_CLIENT_BLOCK as a bare alternation of client
names; claudewatcher compiles it as (?i)\b(...)\b. The raw/ router used it raw, so
a short client name would match inside ordinary words and park clips that have
nothing to do with the client. INGEST_CLIENT_BLOCK stays a full regexp, used as
is. Mutation-checked.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

ingestion/cmd/server/main.go

@@ -150,6 +150,21 @@ func envInt(key string, fallback int) int {
 	return fallback
 }
 
+// ingestClientPattern picks the client-content pattern for raw/ routing.
+// INGEST_CLIENT_BLOCK is a complete regexp and is used as is. Otherwise the
+// shared CLAUDE_INGEST_CLIENT_BLOCK is used, which the deployment injects as a
+// bare alternation of client names that claudewatcher wraps in \b(...)\b: it is
+// wrapped the same way here, or a short name would match inside ordinary words.
+func ingestClientPattern(getenv func(string) string) string {
+	if p := getenv("INGEST_CLIENT_BLOCK"); p != "" {
+		return p
+	}
+	if names := getenv("CLAUDE_INGEST_CLIENT_BLOCK"); names != "" {
+		return `\b(` + names + `)\b`
+	}
+	return ""
+}
+
 // envFlag reads a boolean switch. Unset is off; a value strconv.ParseBool does
 // not understand is an error, so a typo ("ture") cannot silently leave a
 // safety-relevant switch off.
@@ -426,10 +441,7 @@ func main() {
 			os.Exit(1)
 		}
 		if routing {
-			pattern := os.Getenv("INGEST_CLIENT_BLOCK")
-			if pattern == "" {
-				pattern = os.Getenv("CLAUDE_INGEST_CLIENT_BLOCK")
-			}
+			pattern := ingestClientPattern(os.Getenv)
 			router, rerr := wing.NewRouter(brainDir, envOr("INGEST_DEFAULT_WING", "web-clip"), pattern)
 			if rerr != nil {
 				logger.Error("build wing router", "err", rerr)