Run computers with resources and health checks, add settings for bots, workspaces, computers and users

- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and
  editable; new resources stop, remove and recreate the container, its home
  dir kept. Every computer container has a docker health check and stays
  "creating" until it passes; only healthy computers are reached, by
  hostname, else by their IP on the network (dev outside docker).
- Docker is required: the app creates the cobble network on startup and
  exits without docker.
- Production container: deploy/run-app-container.sh mounts .env, the data
  dir and the docker socket; the database (DB_DIR), media, computers' homes
  and bun-sqlite's live schema now live on the data volume.
- Settings pages for bots, workspaces, computers and users, sharing list
  components; bots can be deleted; users are created with a password and
  confirmation, edited and deleted through RBAC-gated APIs.
- User types trimmed to super_admin, admin, member, read_only and revoked;
  admins manage members. UserAvatar shows profile photos from the user row.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/pages/admin/settings/(partials)/settings-list.tsx

@@ -0,0 +1,26 @@
+import type { ReactNode } from "react";
+import Span from "@moduletrace/twui/layout/Span";
+import Stack from "@moduletrace/twui/layout/Stack";
+
+type Props = {
+    children: ReactNode;
+    /**
+     * Shown instead when the list has no rows.
+     */
+    empty?: string;
+    is_empty?: boolean;
+};
+
+/**
+ * A framed list of rows inside a settings group.
+ */
+export default function SettingsList({ children, empty, is_empty }: Props) {
+    return (
+        <Stack className="w-full py-1 gap-0! items-stretch rounded-default border border-solid border-hairline bg-surface">
+            {children}
+            {is_empty && empty ? (
+                <Span className="px-4 py-4 text-[13px] leading-[18px] text-ink-secondary">{empty}</Span>
+            ) : null}
+        </Stack>
+    );
+}