feat: add shared ai workspace assistant service

infra/synology/deploy-current.sh

@@ -51,6 +51,14 @@ rsync -av --delete \
   "${PLATFORM_REPO}/services/ai-workspace-hub/" \
   "${NAS_ROOT}/platform/ai-workspace-hub/"
 
+mkdir -p "${NAS_ROOT}/platform/ai-workspace-assistant"
+rsync -av --delete \
+  --exclude='node_modules/' \
+  --exclude='.env' \
+  --exclude='.env.*' \
+  "${PLATFORM_REPO}/services/ai-workspace-assistant/" \
+  "${NAS_ROOT}/platform/ai-workspace-assistant/"
+
 if [[ "${SYNC_AUTHENTIK_TEMPLATES}" == "1" ]]; then
   mkdir -p "${NAS_ROOT}/authentik/custom-templates"
   rsync -av --delete \
@@ -201,14 +209,14 @@ cd /volume1/docker/nodedc-platform/platform
 sudo /usr/local/bin/docker compose \
   --env-file /volume1/docker/nodedc-platform/platform/.env.synology \
   -f /volume1/docker/nodedc-platform/platform/docker-compose.platform-http.yml \
-  up -d --build --force-recreate --no-deps ai-workspace-hub notification-core launcher
+  up -d --build --force-recreate --no-deps ai-workspace-hub ai-workspace-assistant notification-core launcher
 
 Optional Platform/Auth infra apply, only after deliberate compose/proxy/Auth templates changes:
 
 sudo /usr/local/bin/docker compose \
   --env-file /volume1/docker/nodedc-platform/platform/.env.synology \
   -f /volume1/docker/nodedc-platform/platform/docker-compose.platform-http.yml \
-  up -d --build --force-recreate --no-deps reverse-proxy authentik-server authentik-worker ai-workspace-hub notification-core launcher
+  up -d --build --force-recreate --no-deps reverse-proxy authentik-server authentik-worker ai-workspace-hub ai-workspace-assistant notification-core launcher
 
 After Authentik template rollout, clear global Brand custom CSS from the live DB.
 NODE.DC login CSS must be template-scoped, not stored in Brand.branding_custom_css: