feat(server): per-deployment public URL + deep-link builder (RIG-2717 T5) - #639

…717 T3/T3a)

Persistence for the Linear Agent Session responder:

- T3: new 0002_linear_agent_sessions migration (association row keyed on the
  Linear session id; no dedup column — dedup is the comms rail's
  client_request_id), UpsertLinearAgentSession (ON CONFLICT DO NOTHING,
  created=false on replay) + LinearAgentSession lookup, and
  AuthoredArtifactByCoordinate (by-coordinate ownership read the router needs).
- T3a: generalize the reserved system-account seed to a shared
  ensureSystemSubtypeAccount, add EnsureLinearBridgeAccount seeding @linear as
  a second system-subtype account, and reserve the 'linear' handle against
  user/agent registration.

pgtest-covered (upsert/replay/lookup, by-coordinate hit/miss, @linear
idempotent seed + structural exclusions + reserved-handle guard).

Ref: RIG-2717
Co-authored-by: Matt Wilkinson <matt@rigel.build>

…ration (RIG-2717)

Matt's ruling on #638: collapse the linear_agent_sessions table into the single existing 0001_init.sql migration rather than shipping an incremental 0002 — Compass isn't deployed yet, so there's no data to migrate and no reason for a versioned increment.

Moves the CREATE TABLE linear_agent_sessions into 0001_init.sql (adapting the file-header comment), deletes 0002_linear_agent_sessions.sql, and updates the pgtest header comment that named the '0002 table'. Pure DDL relocation — no backfill (the table carried none), no schema shape change; the migration loader embeds migrations/*.sql and enforces a contiguous 1..N sequence, so a single 0001 stays valid.

Refs RIG-2717
Co-authored-by: Matt Wilkinson <matt@rigel.build>

… T5)

Add ServeConfig.PublicURL (--public-url flag / $COMPASS_PUBLIC_URL,
flag->env->default https://compass.rigel.build), and deepLinkFor(base,
channelID) building the 'Open in Compass' deep link to a Manager's home
channel (the UI hash route), with requirePublicURL as the legible boot guard
for a Linear-webhook-consuming deploy. Threaded through cmd/compass-server
(the server entrypoint) — not cmd/compass (the operator CLI, which does no
server construction).

Ref: RIG-2717
Co-authored-by: Matt Wilkinson <matt@rigel.build>

…ern (RIG-2717)

Matt's ruling on #639: don't default --public-url to the managed-service host (https://compass.rigel.build). That host is where the managed deployment lives, which never lives in this repo; baking it as the fallback means a self-host/dev deploy that forgets the flag silently emits deep links to the managed host.

Removes the defaultPublicURL constant; PublicURL now resolves from --public-url then $COMPASS_PUBLIC_URL with no default (empty when unset). The existing requirePublicURL boot guard already rejects an empty base for a webhook-consuming deploy and yields relative fragments for socket-only local — so no-default is the right shape (a dummy non-empty URL would instead DEFEAT that guard). Updates the flag help + the ServeConfig/boot-log/boot-guard doc comments, and neutralizes the managed host out of deeplink_test.go's sample URLs.

Refs RIG-2717
Co-authored-by: Matt Wilkinson <matt@rigel.build>