Add Ava systemd deployment with dedicated user and workspace

- Add Omni.Agent.Paths module for configurable AVA_DATA_ROOT
- Create ava Linux user in Users.nix with SSH key
- Add systemd service in Beryllium/Ava.nix with graceful shutdown
- Update Skills.hs and Outreach.hs to use configurable paths
- Add startup logging of resolved paths in Telegram.hs
- Create migration script for moving data from _/var/ava to /home/ava
- Add deployment documentation in Beryllium/AVA.md

In dev: AVA_DATA_ROOT unset uses _/var/ava/
In prod: AVA_DATA_ROOT=/home/ava via systemd

Amp-Thread-ID: https://ampcode.com/threads/T-019b2d7e-bd88-7355-8133-275c65157aaf
Co-authored-by: Amp <amp@ampcode.com>

1 files changed, 7 insertions, 0 deletions

diff --git a/Omni/Users.nix b/Omni/Users.nix
index 3de5712..4ae8c17 100644
--- a/Omni/Users.nix
+++ b/Omni/Users.nix
@@ -30,6 +30,13 @@ in {
       openssh.authorizedKeys.keys = readKeys ./Keys/Deploy.pub;
       extraGroups = ["wheel"];
     };
+    ava = {
+      description = "Ava Telegram bot";
+      isNormalUser = true;
+      home = "/home/ava";
+      openssh.authorizedKeys.keys = readKeys ./Keys/Ava.pub;
+      extraGroups = ["git"];
+    };
     #
     # humans
     #