refactor: content-addressed assets, cross-channel multimodal, infra simplification (#63)

* refactor(attachment): multimodal attachment refactor with snapshot schema and storage layer

- Add snapshot schema migration (0008) and update init/versions/snapshots
- Add internal/attachment and internal/channel normalize for unified attachment handling
- Move containerfs provider from internal/media to internal/storage
- Update agent types, channel adapters (Telegram/Feishu), inbound and handlers
- Add containerd snapshot lineage and local_channel tests
- Regenerate sqlc, swagger and SDK

* refactor(media): content-addressed asset system with unified naming

- Replace asset_id foreign key with content_hash as sole identifier
  for bot_history_message_assets (pure soft-link model)
- Remove mime, size_bytes, storage_key from DB; derive at read time
  via media.Resolve from actual storage
- Merge migrations 0008/0009 into single 0008; keep 0001 as canonical schema
- Add Docker initdb script for deterministic migration execution order
- Fix cross-channel real-time image display (Telegram → WebUI SSE)
- Fix message disappearing on refresh (null assets fallback)
- Fix file icon instead of image preview (mime derivation from storage)
- Unify AssetID → ContentHash naming across Go, Agent, and Frontend
- Change storage key prefix from 4-char to 2-char for directory sharding
- Add server-entrypoint.sh for Docker deployment migration handling

* refactor(infra): embedded migrations, Docker simplification, and config consolidation

- Embed SQL migrations into Go binary, removing shell-based migration scripts
- Consolidate config files into conf/ directory (app.example.toml, app.docker.toml, app.dev.toml)
- Simplify Docker setup: remove initdb.d scripts, streamline nginx config and entrypoint
- Remove legacy CLI, feishu-echo commands, and obsolete incremental migration files
- Update install script and docs to require sudo for one-click install
- Add mise tasks for dev environment orchestration

* chore: recover migrations

---------

Co-authored-by: Acbox <acbox0328@gmail.com>

docs/docs/installation/docker.md

@@ -13,7 +13,7 @@ Docker is the recommended way to run Memoh. The stack includes PostgreSQL, Qdran
 Run the official install script (requires Docker and Docker Compose):
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/memohai/Memoh/main/scripts/install.sh | sh
+curl -fsSL https://raw.githubusercontent.com/memohai/Memoh/main/scripts/install.sh | sudo sh
 ```
 
 The script will:
@@ -27,7 +27,7 @@ The script will:
 **Silent install** (use all defaults, no prompts):
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/memohai/Memoh/main/scripts/install.sh | sh -s -- -y
+curl -fsSL https://raw.githubusercontent.com/memohai/Memoh/main/scripts/install.sh | sudo sh -s -- -y
 ```
 
 Defaults when running silently:
@@ -45,10 +45,12 @@ Clone the repository and start with Docker Compose:
 ```bash
 git clone https://github.com/memohai/Memoh.git
 cd Memoh
-docker compose up -d
+sudo docker compose up -d
 ```
 
-By default, Docker Compose uses `docker/config/config.docker.toml`. No config file in the project root is mounted — only this built-in config is used. See [config.toml reference](./config-toml) for all configuration fields.
+> On macOS or if your user is in the `docker` group, `sudo` is not required.
+
+By default, Docker Compose uses `conf/app.docker.toml`. No config file in the project root is mounted — only this built-in config is used. See [config.toml reference](./config-toml) for all configuration fields.
 
 ## Access Points
 
@@ -71,14 +73,14 @@ To use your own config file:
 1. Copy the Docker config template and edit it. See [config.toml reference](./config-toml) for field descriptions:
 
 ```bash
-cp docker/config/config.docker.toml config.toml
+cp conf/app.docker.toml config.toml
 nano config.toml
 ```
 
 2. Point `MEMOH_CONFIG` at your config when starting (path is on the host; run `docker compose` from the project root):
 
 ```bash
-MEMOH_CONFIG=./config.toml docker compose up -d
+sudo MEMOH_CONFIG=./config.toml docker compose up -d
 ```
 
 **Recommended changes for production** (see [config.toml reference](./config-toml) for details):
@@ -89,6 +91,8 @@ MEMOH_CONFIG=./config.toml docker compose up -d
 
 ## Common Commands
 
+> Prefix with `sudo` on Linux if your user is not in the `docker` group.
+
 ```bash
 docker compose up -d           # Start
 docker compose down            # Stop

docs/docs/troubleshooting.md

@@ -47,7 +47,7 @@ docker exec memoh-containerd ctr -n default containers rm mcp-<bot-id>
 docker compose restart server
 ```
 
-> **Note**: If you also run the server locally (outside Docker), keep the Docker config (`docker/config/config.docker.toml`) separate from your local `config.toml`, and update `docker-compose.yml` to mount the Docker-specific config instead.
+> **Note**: If you also run the server locally (outside Docker), keep the Docker config (`conf/app.docker.toml`) separate from your local `config.toml`, and update `docker-compose.yml` to mount the Docker-specific config instead.
 
 ## MCP Container: Image update not taking effect after rebuild