Share one crew across the install, keep user memory per user

Bots, workspaces and computers now belong to the install. Users reach
workers only through bot_users (assigned by a super admin or admin) and
workspace_users; the coordinator and main computer are one per install,
and only the super admin sees the coordinator. Conversations are per
user (bot_sessions.user_id), jobs run for the session's user, and live
updates go only to who should see them.

A bot's core memory is now general knowledge shared by every user it
works for; what it learns about a user lives in bot_user_memories.

One-off scripts move existing installs over: move-bot-memory-to-owners
(run first), then share-crew.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/workspaces/grab-workspace-computers.ts

@@ -16,7 +16,7 @@ export default async function grabWorkspaceComputers({
     const res = await BunSQLite.sql<ComputerWithStatus & { metadata?: string | null }>({
         sql: `SELECT c.*, co.status AS status, co.metadata AS metadata FROM computers c
             JOIN workspace_computers wc ON wc.computer_id = c.id AND wc.workspace_id = ?
-            JOIN workspaces w ON w.id = wc.workspace_id AND w.user_id = c.user_id
+            JOIN workspaces w ON w.id = wc.workspace_id
             LEFT JOIN containers co ON co.id = c.container_id
             ORDER BY c.id = w.computer_id DESC, wc.id ASC`,
         values: [workspace_id],