feat: Add workspace container with claude auto-start

- Create cfg/claude.service for systemd auto-start of Claude Code
- Enable claude.service on container boot
- Update install.sh to automatically create workspace container
- Update aios.zsh to start workspace and connect when shell:true
- Add machinectl to sudoers NOPASSWD for ai user
- Workspace container starts on login, claude.service auto-runs inside

cfg/install.sh

@@ -58,6 +58,10 @@ systemctl enable --now systemd-machined
 echo "5. Creating initial backup image..."
 machinectl clone $NAME $BACKUP
 
+# Create workspace container for AI operations
+echo "6. Creating workspace container..."
+machinectl clone $NAME workspace
+
 echo ""
 echo "=== Installation complete ==="
 echo ""