Share one crew across the install, keep user memory per user

Bots, workspaces and computers now belong to the install. Users reach
workers only through bot_users (assigned by a super admin or admin) and
workspace_users; the coordinator and main computer are one per install,
and only the super admin sees the coordinator. Conversations are per
user (bot_sessions.user_id), jobs run for the session's user, and live
updates go only to who should see them.

A bot's core memory is now general knowledge shared by every user it
works for; what it learns about a user lives in bot_user_memories.

One-off scripts move existing installs over: move-bot-memory-to-owners
(run first), then share-crew.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/workspaces/create-workspace.ts

@@ -4,8 +4,13 @@ import type {
     BunSQLiteTables,
 } from "@/db/types/db";
 import assertPromptLength from "@/src/utils/assert-prompt-length";
+import assertCrewManager from "@/src/functions/backend/db/access/assert-crew-manager";
 
 type Params = {
+    /**
+     * Who creates it (a super admin or admin). Workspaces belong to the
+     * install.
+     */
     user_id: number | string;
     name: string;
     description?: string;
@@ -13,7 +18,8 @@ type Params = {
 };
 
 /**
- * Creates a workspace owned by the user and returns its id.
+ * Creates a workspace and returns its id. Members reach it once they're
+ * added to it (`workspace_users`).
  */
 export default async function createWorkspace({
     user_id,
@@ -21,6 +27,8 @@ export default async function createWorkspace({
     description,
     system_prompt,
 }: Params) {
+    await assertCrewManager({ user_id });
+
     assertPromptLength({ label: "System prompt", text: system_prompt });
 
     const res = await BunSQLite.insert<