Open Terminal fleet for all accounts + OpenWebUI UAT pass (#610)

open-terminal 0.11.34 bare-metal (human-authorized host install) with a
systemd template unit: reachableceo on tailscale-only :30000 (cwd
~/projects) and all 8 other accounts on :30001-30008, each with its own
key kept out of ps in per-user TOMLs, all users added to the docker group.
Keys live in ~/.creds + /etc/ukrrs/open-terminal, never in this repo.

UAT: throwaway OpenWebUI v0.11.1 (matched to the human's Cloudron prod)
driven purely over its HTTP API against the beta gateway lane - connection
verify/config PASS, direct exec as uid 1001 PASS, and the chat round trip
PASS: the model emitted run_command, we executed it through OpenWebUI's
terminal proxy (server holds the key), and the final answer named 9/9 real
project directories; earlier negative runs prove the test catches
hallucinated output. Ops note OPEN-TERMINAL.md documents production wiring
(prod openwebui container v0.3.10 is too old and needs an upgrade first).

Also tonight: agent-stack relaunchers removed (6-, backups kept) so no
screen/crush sessions auto-start on reboot; 22:00 night-profile flip
observed live; docs synced for the earlier teardown.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
[#610]

6-remove-agent-stacks.out

@@ -0,0 +1,19 @@
+== remove agent stacks 2026-08-31T21:58:26-05:00 ==
+Removed '/etc/systemd/system/timers.target.wants/tsg-supervisor.timer'.
+Removed '/etc/systemd/system/multi-user.target.wants/reachableceo-agent-stack.service'.
+removed unit: tsg-supervisor.timer
+removed unit: tsg-supervisor.service
+removed unit: tsg-agent-stacks.service
+removed unit: reachableceo-agent-stack.service
+moved launcher: /usr/local/sbin/launch-rceo-stack.sh
+moved launcher: /usr/local/sbin/setup-rceo-stack.sh
+No screen session found.
+root screen ukrrs-gateway-final: not present
+-- cron cross-check (expect clean) --
+root crontab: clean
+cron dirs: clean
+-- verify: units gone, timer list, remaining screens --
+no stack/supervisor units remain
+No Sockets found in /run/screen/S-root.
+
+== done 2026-08-31T21:58:29-05:00 — rollback: restore /home/reachableceo/projects/ultix/removed-agent-stacks + re-enable units ==