Add the harness, envs, per-bot models and chat attachments

- Harness: providers, model catalog synced hourly, automatic free picks,
  cooldowns, tool loop with context trimming, MCP computer tools
- Bots queue runs replies and tasks through the harness; jobs wait
  (attempt refunded) while every model is resting
- Envs: Settings > Environment, scoped general/workspace/computer,
  written to computers and redacted from tool output
- Models: Settings > Models, per-harness provider select defaulting to
  OpenRouter, and a models modal on each bot's chat (the coordinator's
  edits the defaults)
- Chat: thinking row while a reply runs, file attachments (upload,
  paste, drop) that replies read as images, audio and document text
- Fix media uploads failing after a user's first file, and private
  files being served from the public media path

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/dict/settings-pages-dict.ts

@@ -1,7 +1,9 @@
 import {
+    CpuAi,
     KeyRound,
     SlidersHorizontal,
     UserRound,
+    Variable,
     type LucideIcon,
 } from "lucide-react";
 
@@ -9,6 +11,10 @@ export type SettingsPage = {
     title: string;
     url: string;
     Icon: LucideIcon;
+    /**
+     * Shown and served to super admins only.
+     */
+    super_admin_only?: boolean;
 };
 
 /**
@@ -27,6 +33,18 @@ export const SettingsPages: SettingsPage[] = [
         url: "/admin/settings/change-password",
         Icon: KeyRound,
     },
+    {
+        title: "Models",
+        url: "/admin/settings/models",
+        Icon: CpuAi,
+        super_admin_only: true,
+    },
+    {
+        title: "Environment",
+        url: "/admin/settings/environment",
+        Icon: Variable,
+        super_admin_only: true,
+    },
 ];
 
 export const SettingsDefaultPath = "/admin/settings/general";