Initial commit — fireclaw multi-agent system

Firecracker microVM-based multi-agent system with IRC orchestration and local LLMs.

Features:
- Ephemeral command runner with VM snapshots (~1.1s)
- Multi-agent orchestration via overseer IRC bot
- 5 agent templates (worker, coder, researcher, quick, creative)
- Tool access (shell + podman containers inside VMs)
- Persistent workspace + memory system (MEMORY.md pattern)
- Agent hot-reload (model/persona swap via SSH + SIGHUP)
- Non-root agents, graceful shutdown, crash recovery
- Agent-to-agent communication via IRC
- DM support, /invite support
- Systemd service, 20 regression tests

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

scripts/teardown-bridge.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# Remove the fireclaw bridge and NAT rules
+# Run with sudo
+
+set -euo pipefail
+
+BRIDGE="fcbr0"
+SUBNET="172.16.0.0/24"
+EXT_IFACE=$(ip route show default | awk '{print $5; exit}')
+
+echo "Removing NAT rules..."
+iptables -t nat -D POSTROUTING -s ${SUBNET} -o ${EXT_IFACE} -j MASQUERADE 2>/dev/null || true
+iptables -D FORWARD -i ${BRIDGE} -o ${EXT_IFACE} -j ACCEPT 2>/dev/null || true
+iptables -D FORWARD -i ${EXT_IFACE} -o ${BRIDGE} -m state --state RELATED,ESTABLISHED -j ACCEPT 2>/dev/null || true
+
+echo "Removing bridge ${BRIDGE}..."
+ip link set ${BRIDGE} down 2>/dev/null || true
+ip link del ${BRIDGE} 2>/dev/null || true
+
+echo "Done."