Add the harness, envs, per-bot models and chat attachments

- Harness: providers, model catalog synced hourly, automatic free picks,
  cooldowns, tool loop with context trimming, MCP computer tools
- Bots queue runs replies and tasks through the harness; jobs wait
  (attempt refunded) while every model is resting
- Envs: Settings > Environment, scoped general/workspace/computer,
  written to computers and redacted from tool output
- Models: Settings > Models, per-harness provider select defaulting to
  OpenRouter, and a models modal on each bot's chat (the coordinator's
  edits the defaults)
- Chat: thinking row while a reply runs, file attachments (upload,
  paste, drop) that replies read as images, audio and document text
- Fix media uploads failing after a user's first file, and private
  files being served from the public media path

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/pages/admin/settings/models/(utils)/changed-harness-settings.ts

@@ -0,0 +1,35 @@
+import type { HarnessKind } from "@/src/dict/harness-dict";
+import type {
+    HarnessFormValue,
+    HarnessSettingsFormObject,
+} from "@/src/types";
+
+type Params = {
+    form: HarnessSettingsFormObject;
+    saved: HarnessSettingsFormObject;
+};
+
+/**
+ * The harness settings that differ from what is saved, ready to send.
+ */
+export default function changedHarnessSettings({ form, saved }: Params) {
+    return (Object.keys(form) as HarnessKind[]).flatMap((harness) => {
+        const value = form[harness];
+
+        if (!value || isSame({ a: value, b: saved[harness] })) return [];
+
+        return [{ harness, ...value }];
+    });
+}
+
+function isSame({ a, b }: { a: HarnessFormValue; b?: HarnessFormValue }) {
+    return (
+        Boolean(b) &&
+        Boolean(a.inherit) == Boolean(b!.inherit) &&
+        a.model_id == b!.model_id &&
+        (a.provider_id ?? null) == (b!.provider_id ?? null) &&
+        a.fallback == b!.fallback &&
+        a.enabled == b!.enabled &&
+        (a.voice || "") == (b!.voice || "")
+    );
+}