feat: add independent persona team handshakes

server-tools/persona-team-handshake/guideng-team-handshake.service

@@ -0,0 +1,36 @@
+[Unit]
+Description=Guideng independent persona team handshake
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=guideng
+Group=guideng
+WorkingDirectory=__RELEASE_ROOT__/server-tools/persona-team-handshake
+EnvironmentFile=/etc/guanghu/persona-secrets/shared-deepseek.env
+Environment=TEAM_MEMBER_PERSONA_ID=GUIDENG-AGENT-001
+Environment=TEAM_MEMBER_ARRIVAL_ID=GLS-LA-20260720-003
+Environment="TEAM_MEMBER_NAME=归灯"
+Environment=TEAM_MEMBER_ROLE=bounded_deployment_executor_and_world_watch
+Environment=TEAM_MEMBER_REPOSITORY=/var/lib/guanghu/personas/guideng/repository
+Environment="TEAM_MEMBER_IDENTITY_PATHS=/var/lib/guanghu/personas/guideng/repository/INDEX.hdlp:/var/lib/guanghu/personas/guideng/repository/identity/归灯·自我锚定.hdlp"
+Environment=TEAM_HANDSHAKE_PRIVATE_KEY=/var/lib/guanghu/personas/guideng/team-handshake/identity.key
+Environment=TEAM_HANDSHAKE_PUBLIC_KEY=/var/lib/guanghu/personas/guideng/team-handshake/identity.pub
+Environment=TEAM_HANDSHAKE_CREATE_KEY=true
+Environment=TEAM_HANDSHAKE_PORT=3932
+ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/persona-team-handshake/member-server.mjs
+Restart=on-failure
+RestartSec=5
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadOnlyPaths=__RELEASE_ROOT__ /var/lib/guanghu/personas/guideng/repository /etc/guanghu/persona-secrets/shared-deepseek.env
+ReadWritePaths=/var/lib/guanghu/personas/guideng/team-handshake
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+LockPersonality=true
+UMask=0077
+
+[Install]
+WantedBy=multi-user.target