move the pty sidecar under src/servers/sidecar

it was the only sidecar living outside src/servers/sidecar/ — it sat in
api/terminal/ next to the bridge that talks to it, which is the one place a reader
looking for "the sidecars" would not check. now src/servers/sidecar/pty/index.mjs,
matching every peer, with a note on the pm2 entry about why this one is node and
.mjs (node-pty is a native addon) rather than bun and typescript like the rest.

the templates/ directory went to api/users/, next to provision.ts:seedShellConfigs,
which is now its only consumer — the sidecar's duplicate seeder went with the
sandbox branch in the previous commit. api/terminal/ is left holding exactly one
thing: the websocket bridge.

no behaviour change. the pm2 entry's script path changed, so `pm2 restart
officer-pty` is not enough — pm2 remembers the old path until the entry is deleted
and started again. commands are in SIDECAR_WORK_LOG.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

ecosystem.config.cjs

@@ -24,10 +24,13 @@ module.exports = {
       args: 'run src/servers/sidecar/email/index.ts',
       watch: false,
     },
+    // The only sidecar run by `node` rather than `bun`, and the only one that is not TypeScript: node-pty
+    // is a native addon. It also does not use sidecar/connect.ts, and carries its own copy of the
+    // reconnect loop.
     {
       name: 'officer-pty',
       script: 'node',
-      args: 'src/servers/api/terminal/pty-sidecar.mjs',
+      args: 'src/servers/sidecar/pty/index.mjs',
       watch: false,
     },
     {