feat: Add workspace container with claude auto-start

- Create cfg/claude.service for systemd auto-start of Claude Code
- Enable claude.service on container boot
- Update install.sh to automatically create workspace container
- Update aios.zsh to start workspace and connect when shell:true
- Add machinectl to sudoers NOPASSWD for ai user
- Workspace container starts on login, claude.service auto-runs inside

cfg/claude.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Claude Code AI Assistant
+After=network.target
+
+[Service]
+Type=simple
+User=ai
+WorkingDirectory=/home/ai
+Environment=HOME=/home/ai
+ExecStart=/usr/bin/claude
+Restart=on-failure
+RestartSec=5s
+
+[Install]
+WantedBy=multi-user.target