Run computers with resources and health checks, add settings for bots, workspaces, computers and users

- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and
  editable; new resources stop, remove and recreate the container, its home
  dir kept. Every computer container has a docker health check and stays
  "creating" until it passes; only healthy computers are reached, by
  hostname, else by their IP on the network (dev outside docker).
- Docker is required: the app creates the cobble network on startup and
  exits without docker.
- Production container: deploy/run-app-container.sh mounts .env, the data
  dir and the docker socket; the database (DB_DIR), media, computers' homes
  and bun-sqlite's live schema now live on the data volume.
- Settings pages for bots, workspaces, computers and users, sharing list
  components; bots can be deleted; users are created with a password and
  confirmation, edited and deleted through RBAC-gated APIs.
- User types trimmed to super_admin, admin, member, read_only and revoked;
  admins manage members. UserAvatar shows profile photos from the user row.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/server.ts

@@ -10,6 +10,7 @@ import liveRelay from "./live-relay";
 import enableForeignKeys from "./functions/backend/db/enable-foreign-keys";
 import handleComputerProxy from "./functions/server/computers/handle-computer-proxy";
 import { ComputerProxyPrefix } from "./dict/computer-dict";
+import ensureDockerNetwork from "./functions/backend/docker/ensure-docker-network";
 
 declare global {}
 
@@ -21,6 +22,18 @@ const port = process.env.PORT || 7227;
 await enableForeignKeys();
 await bunext.bunextInit();
 
+/**
+ * Computers are docker containers on this network, so the app doesn't
+ * start without docker.
+ */
+try {
+    await ensureDockerNetwork();
+} catch (error) {
+    await logError({ title: "Docker isn't available", error }).catch(() => {});
+    console.error(`Can't start without docker: ${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+}
+
 const server = Bun.serve({
     async fetch(req, server) {
         try {