Add Maria WhatsApp+RAG bridge as a service (LXC 171)

Move the /tmp prototype (Baileys bridge + RAG consumer) into git as a
proper sibling project to discord-bridge/: own systemd --user units
(whatsapp bridge, rag consumer, dashboard, periodic Drive sync timer),
a filesystem document store with a stdlib control dashboard (start/
stop/restart, document CRUD, reindex, Google Drive sync via rclone),
and an idempotent ops/install.sh following the same conventions.

Co-Authored-By: Claude Agent <noreply@anthropic.com>

proxmox/lxc171-claude-agent/maria-whatsapp-bridge/ops/env.example

@@ -0,0 +1,42 @@
+# Configurarea puntii WhatsApp+RAG a lui Maria.
+#
+# install.sh copiaza acest fisier in ~/.maria-bridge/env cu drepturi 0600.
+# Format KEY=value, fara `export`, fara expandare de variabile.
+
+# --- Puntea WhatsApp (whatsapp/index.js) -----------------------------------
+BRIDGE_HOST=127.0.0.1
+BRIDGE_PORT=8099
+# true = raspunde DOAR in chatul cu tine insuti (self-chat). Pune "false" abia
+# dupa ce esti multumit de calitatea raspunsurilor — altfel Maria raspunde la
+# oricine iti scrie pe numarul legat.
+TEST_MODE_SELF_CHAT_ONLY=true
+
+# --- Backend LLM + embeddings -----------------------------------------------
+# Modelul de chat folosit pentru raspunsuri (format compatibil OpenAI
+# /v1/chat/completions). Implicit presupune un tunel/proxy local catre acelasi
+# backend folosit de Echo (LXC 110) — vezi docs/maria-whatsapp-rag-prototype.md.
+LLM_URL=http://127.0.0.1:8091
+# Ollama, pentru embeddings (nomic-embed-text).
+OLLAMA_URL=http://127.0.0.1:11434
+EMBED_MODEL=nomic-embed-text
+TOP_K=3
+MAX_TOKENS=250
+POLL_INTERVAL_S=2
+
+# --- Depozit de documente + sincronizare Google Drive -----------------------
+# Tinta rclone pentru dosarul de documente (partajat de pe Windows,
+# D:\GoogleDrive\romfast\document_store), format `<remote>:<cale>`.
+# Gol = sincronizare dezactivata; documentele se administreaza doar manual din
+# dashboard. Vezi README.md, "Sincronizare cu Google Drive", pentru configurarea
+# remote-ului `rclone` (cont de serviciu, fara OAuth interactiv pe un container
+# headless).
+DRIVE_REMOTE=
+
+# --- dashboard de control (dashboard/api.py) --------------------------------
+# Token de acces. Generat automat de ops/install.sh daca lipseste.
+DASHBOARD_TOKEN=
+# `off` scoate complet login-ul. De pus DOAR daca panoul ramane strict pe
+# 127.0.0.1 / tailnet (acelasi motiv ca la discord-bridge).
+DASHBOARD_AUTH=
+DASHBOARD_BIND=127.0.0.1
+DASHBOARD_PORT=18792