feat: AIUI chat mode integration with iframe, context broker, overnight loop

- Chat mode: AIUI loads in sandboxed iframe at /dashboard/chat with transparent bg
- Mode switcher: Easy + Pro tabs only, Chat is a launcher button
- Keyboard shortcuts: Cmd+1 (Easy), Cmd+2 (Pro), Cmd+3 (Chat), Cmd+M (cycle)
- Directional transitions: chat slides from/to left, dashboard from/to right
- Context broker: postMessage protocol for quarantined AIUI communication
- AI permissions store: user-controlled toggles for data access categories
- Settings UI: AI Data Access section with per-category toggles
- AIUI container manifest and nginx proxy config for /aiui/
- Deploy script builds AIUI with /aiui/ base path
- Overnight loop infrastructure (loop.sh, prepare.sh, plan.md, prompt.md)
- Security hooks for autonomous overnight runs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/aiui/manifest.yml

@@ -0,0 +1,35 @@
+app:
+  id: aiui
+  name: AI Assistant
+  version: 0.1.0
+  description: Conversational AI interface for Archipelago. Quarantined — communicates only via context broker.
+  internal: true  # System-managed, not shown in App Store
+
+  container:
+    image: localhost/archipelago-aiui:latest
+    pull_policy: always
+
+  resources:
+    cpu_limit: 1
+    memory_limit: 512Mi
+    disk_limit: 1Gi
+
+  security:
+    capabilities: []
+    readonly_root: true
+    no_new_privileges: true
+    network_policy: isolated  # No outbound network — all data comes via context broker
+
+  ports:
+    - host: 5180
+      container: 80
+      protocol: tcp
+      bind: 127.0.0.1  # Only accessible via nginx proxy, not externally
+
+  health_check:
+    type: http
+    endpoint: http://localhost:80
+    path: /
+    interval: 60s
+    timeout: 5s
+    retries: 3