feat(services): volume mounts + admin volume inventory (C1)

services.volumes JSONB [{type: volume|bind, source, target, read_only}]
mapped into every replica's container config at deploy and reconcile
time, hashed into the runtime spec so mount changes trigger
reconciliation. Mounted via existing docker.HostConfig.Mounts.

- RuntimeSpec.Volumes + specHash + mount.Mount mapping in createReplica
- Create/update service accepts volumes; PUT replaces the whole list
- Replica-count reconcile now goes through the deploy queue — the last
  raw `go` reconcile left that could race a build
- GET /admin/volumes inventories node volumes with in_use flags;
  DELETE /admin/volumes/:name removes unused ones (409 on in-use)
- CLI: services update --volume/--bind/--clear-volumes, volumes
  list|delete; MCP: services_update + volumes_list/delete
- Settings UI: Volumes section with mount editor
- Migration normalizes the nullable baseline column to NOT NULL [].

Verified live: deploy applies mounts to the container, docker
auto-creates named volumes, in-use deletion is refused.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

app/frontend/src/lib/api-client.ts

@@ -54,9 +54,17 @@ export type ServiceEntity = {
   domain?: string;
   healthcheckPath?: string;
   restartPolicy?: string;
+  volumes?: ServiceVolume[];
   publicUrl?: string;
 };
 
+export type ServiceVolume = {
+  type?: 'volume' | 'bind';
+  source: string;
+  target: string;
+  read_only?: boolean;
+};
+
 export type RuntimeContainer = {
   id: string;
   name: string;
@@ -552,6 +560,7 @@ function normalizeService(service: RawService): ServiceEntity | null {
     domain: service.domain,
     healthcheckPath: service.healthcheck_path,
     restartPolicy: service.restart_policy,
+    volumes: service.volumes as ServiceVolume[] | undefined,
     publicUrl: service.public_url,
   };
 }