Add workspaces, computers, bot memory and the bots queue

- Schema: workspaces (+ workspace_bots, workspace_computers), containers,
  computers, bot_computers, bots.memory, workspaces.system_prompt, and
  bots_queue as a bun-sqlite isQueue table
- Main computer (and its container record) ensured with the coordinator on
  signup, seed and /admin/bots; the coordinator's access to it is locked
- Effective computer access: direct grants plus workspace computers
- Full bot prompt: core instructions, workspace prompts, then memory;
  bots can rewrite their memory and system prompt
- Queue helpers on the native BunSQLite.queue API, plus a handler that
  heartbeats, serializes per computer, recovers after restarts, reports
  lost jobs, supports cancelling and pushes outcomes over the WebSocket
- Enable SQLite foreign keys at startup so schema cascades fire
- Prune finished jobs daily

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/server.ts

@@ -5,6 +5,8 @@ import { websocket } from "./websocket";
 import userAuth from "./functions/backend/auth/user-auth";
 import type { WebSocketSession } from "./websocket/types";
 import { logError, grabRequestIP } from "./functions/backend/logger";
+import botsQueue from "./bots-queue";
+import enableForeignKeys from "./functions/backend/db/enable-foreign-keys";
 
 declare global {}
 
@@ -13,6 +15,7 @@ const WEBSOCKET_ENDPOINT = "/ws";
 const development = process.env.NODE_ENV == "development";
 const port = process.env.PORT || 7227;
 
+await enableForeignKeys();
 await bunext.bunextInit();
 
 const server = Bun.serve({
@@ -74,4 +77,5 @@ bunext.bunextLog.info(
     `Server running on http://${server.hostname}:${server.port} ...`,
 );
 
-cron();
+cron();
+botsQueue();