Assistant memory and AI insights employees tab

This release adds long-term memory for assistants, propagates runtime image upgrades to idle Fly machines, and surfaces per-employee Gram uptake under AI Insights.

Features

• Assistant memory #2629  - Adds per-assistant long-term memory backed by vector embeddings. Agents can remember, recall, and forget facts across threads via three new platform tools, gated by the assistant_memory product feature. Includes a management API for listing and deleting memories, and a background reaper that hard-deletes soft-deleted rows on schedule. (Author: @danielkov )
• Runtime image upgrades for idle Fly machines #2701  - Propagates assistant runtime image upgrades to existing Fly machines. On the next admission, an idle machine running an older runtime image is recycled in place to the latest version. Mid-turn admissions are left alone so a future idle window picks up the upgrade. (Author: @danielkov )
• Employees tab in AI Insights #2699  - Adds an Employees tab to the AI Insights section that tracks Gram uptake and compliance across organization members. Shows per-member token usage, compliance status, and last activity over the last 30 days, paginated at 25 per page. Usage is attributed by matching the email reported by each AI coding tool to the member’s Gram account. (Author: @subomi )

Bug fixes

• Slack manifest bot-scope superset #2665  - Always grants the full Slack bot-scope superset in the assistant onboarding manifest builder, regardless of which platform tools are attached. Slack manifests are static post-install, so per-tool scope gating only locked future capabilities behind a forced re-install. (Author: @danielkov )
• Environment scope grants in RBAC toolbar #2698  - Surfaces environment:read and environment:write in the RBAC dev toolbar and the access.listGrants fallback so the env-clone permission picker works end-to-end. (Author: @simplesagar )