Support Claude Code Max via OAuth token

Pass CLAUDE_CODE_OAUTH_TOKEN to workspaces so they use the Max
subscription instead of pay-per-use API credits. Falls back to
ANTHROPIC_API_KEY if OAuth token not set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

coder/cloudflare-worker/main.tf

@@ -196,6 +196,15 @@ data "coder_parameter" "callback_url" {
   mutable      = false
 }
 
+data "coder_parameter" "claude_oauth_token" {
+  name         = "claude_oauth_token"
+  display_name = "Claude OAuth Token"
+  description  = "OAuth token for Claude Code Max subscription"
+  type         = "string"
+  default      = ""
+  mutable      = false
+}
+
 data "coder_parameter" "deploy_env" {
   name         = "deploy_env"
   display_name = "Deploy Environment"
@@ -414,7 +423,8 @@ resource "coder_agent" "main" {
   }
 
   env = {
-    ANTHROPIC_API_KEY = data.coder_parameter.anthropic_api_key.value
+    ANTHROPIC_API_KEY        = data.coder_parameter.anthropic_api_key.value
+    CLAUDE_CODE_OAUTH_TOKEN  = data.coder_parameter.claude_oauth_token.value
     GITHUB_TOKEN      = data.coder_external_auth.github.access_token
     GITEA_TOKEN       = data.coder_parameter.gitea_token.value
     GITEA_ORG         = data.coder_parameter.gitea_org.value
@@ -576,6 +586,11 @@ resource "kubernetes_deployment_v1" "workspace" {
             value = data.coder_parameter.anthropic_api_key.value
           }
 
+          env {
+            name  = "CLAUDE_CODE_OAUTH_TOKEN"
+            value = data.coder_parameter.claude_oauth_token.value
+          }
+
           env {
             name  = "GITHUB_TOKEN"
             value = data.coder_external_auth.github.access_token