feat: add admin/internal database API with CRUD, read-only query, and natural-language SQL endpoints

Add a new `/dbapi` router package providing a generic database API over `dataset`, restricted to admin sessions, admin API keys, and the internal gateway key. Includes:

- `tables.py`: list all tables and inspect table schemas
- `crud.py`: full CRUD operations (GET, POST, PATCH, DELETE) with soft-delete awareness, born-live inserts, `?include_deleted`, `.../restore`, and `?hard=true` purge
- `query.py`: validated read-only SELECT execution via sqlglot parsing, classification, and EXPLAIN dry-run; async query jobs with WebSocket streaming via `DbApiJobService`
- `nl.py`: natural-language-to-SQL conversion using the platform AI gateway with re-prompting until validation passes

Also register `DbApiJobService` and `PubSubService` in the service manager, add `DBAPI_DIR` to config data paths, and force cleartext `http://` connections to HTTP/1.1 in `curl_transport` to fix large request failures against uvicorn's HTTP/1.1-only internal gateway.

tests/unit/services/containers.py

@@ -145,6 +145,34 @@ def test_reconcile_launches_and_stops(env):
     assert store.get_instance(inst["uid"])["status"] == store.ST_STOPPED
 
 
+def test_manual_start_relaunches_after_never_policy_exit(env):
+    fake = env["fake"]
+    inst = _ready_instance(env, restart_policy="never", autostart=True)
+    service = ContainerService()
+    run_async(service.run_once())
+    refresh_snapshot()
+    inst = store.get_instance(inst["uid"])
+    cid = inst["container_id"]
+    assert inst["status"] == store.ST_RUNNING and cid
+
+    fake._set_state(cid, "exited", 0)
+    run_async(service.run_once())
+    refresh_snapshot()
+    inst = store.get_instance(inst["uid"])
+    assert inst["status"] == store.ST_STOPPED
+    assert inst["desired_state"] == store.DESIRED_STOPPED
+
+    api.set_desired_state(inst, store.DESIRED_RUNNING)
+    refresh_snapshot()
+    run_async(service.run_once())
+    refresh_snapshot()
+    inst = store.get_instance(inst["uid"])
+    assert inst["status"] == store.ST_RUNNING
+    assert inst["desired_state"] == store.DESIRED_RUNNING
+    assert cid in fake.removed
+    assert inst["container_id"] and inst["container_id"] != cid
+
+
 def test_reconcile_reaps_orphan(env):
     fake = env["fake"]
     run_async(