Share one crew across the install, keep user memory per user

Bots, workspaces and computers now belong to the install. Users reach
workers only through bot_users (assigned by a super admin or admin) and
workspace_users; the coordinator and main computer are one per install,
and only the super admin sees the coordinator. Conversations are per
user (bot_sessions.user_id), jobs run for the session's user, and live
updates go only to who should see them.

A bot's core memory is now general knowledge shared by every user it
works for; what it learns about a user lives in bot_user_memories.

One-off scripts move existing installs over: move-bot-memory-to-owners
(run first), then share-crew.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/bot-sessions/grab-user-bot-session.ts

@@ -7,15 +7,14 @@ type Params = {
 };
 
 /**
- * A session only if its bot belongs to the given owner.
+ * A session only if it's the given user's own.
  */
 export default async function grabUserBotSession({
     session_id,
     user_id,
 }: Params): Promise<BUN_SQLITE_COBBLE_BOT_SESSIONS | null> {
     const res = await BunSQLite.sql<BUN_SQLITE_COBBLE_BOT_SESSIONS>({
-        sql: `SELECT s.* FROM bot_sessions s JOIN bots b ON b.id = s.bot_id
-            WHERE s.id = ? AND b.user_id = ? LIMIT 1`,
+        sql: `SELECT s.* FROM bot_sessions s WHERE s.id = ? AND s.user_id = ? LIMIT 1`,
         values: [session_id, user_id],
     });