feat(server): proxy browser desktop with lease-based control/view credentials

/api/v1/browser/desktop/{sessionId}/* proxies Selkies HTTP and WebSocket,
console sessions only. The holder of the active human lease gets the control
password, everyone else the view-only one; the WS bridge rechecks every 3s
and drops the connection on role change so the client reconnects downgraded.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/index.ts

@@ -3,6 +3,7 @@ import { agentModule } from "./agent/index.ts";
 import { authSettingsModule } from "./auth-settings/index.ts";
 import { browserModule } from "./browser/index.ts";
 import { cacheModule } from "./cache/index.ts";
+import { desktopModule } from "./desktop/index.ts";
 import { fileManagerModule } from "./file-manager/index.ts";
 import { mcpModule } from "./mcp/index.ts";
 import { piModule } from "./pi/index.ts";
@@ -29,6 +30,7 @@ export const SERVER_MODULES: readonly ServerModule[] = [
   schedulesModule,
   searchModule,
   browserModule,
+  desktopModule,
   mcpModule,
   webSearchModule,
   cacheModule,