Manager now runs on QwenPaw 2.0.1 alongside PR agentscope-ai#1077's Worker migration.

Key changes:
- Separate venvs: /opt/copaw-venv (copaw 1.0.2 for bridge.py) and
  /opt/venv/qwenpaw (qwenpaw 2.0.1 for Manager runtime), avoiding
  agentscope version conflict (1.0.20 vs 2.0.4)
- Replace copaw hooks (monkey-patch CoPawAgent._create_toolkit) with
  agentteams-manager-tools QwenPaw plugin (api.register_tool()) for
  projectflow/taskflow/message/filesync
- Delete Matrix channel physical overlay; use QwenPaw plugin system
  (agentteams-matrix-channel) symlinked into WORKING_DIR/plugins/
- run_copaw_app.py simplified to runpy.run_module('qwenpaw')
- bridge.py invoked with /opt/copaw-venv/bin/python3 (pure stdlib,
  copaw 1.0.2 deps preserved)
- CI pgrep pattern accepts both 'copaw app' and 'qwenpaw app'

Manager now runs on QwenPaw 2.0.1 alongside PR agentscope-ai#1077's Worker migration.

Key changes:
- Separate venvs: /opt/copaw-venv (copaw 1.0.2 for bridge.py) and
  /opt/venv/qwenpaw (qwenpaw 2.0.1 for Manager runtime), avoiding
  agentscope version conflict (1.0.20 vs 2.0.4)
- Replace copaw hooks (monkey-patch CoPawAgent._create_toolkit) with
  agentteams-manager-tools QwenPaw plugin (api.register_tool()) for
  projectflow/taskflow/message/filesync
- Delete Matrix channel physical overlay; use QwenPaw plugin system
  (agentteams-matrix-channel) symlinked into WORKING_DIR/plugins/
- run_copaw_app.py simplified to runpy.run_module('qwenpaw')
- bridge.py invoked with /opt/copaw-venv/bin/python3 (pure stdlib,
  copaw 1.0.2 deps preserved)
- CI pgrep pattern accepts both 'copaw app' and 'qwenpaw app'

Systematic alignment with PR agentscope-ai#1077 Worker Dockerfile and QwenPaw 2.0
conventions:

Dockerfile:
- CMS observability: loongsuite-instrumentation-copaw → -qwenpaw
  + add loongsuite-otel-util-genai (matches Worker Dockerfile)

start-copaw-manager.sh:
- Add QWENPAW_SECRET_DIR, QWENPAW_RUNNING_IN_CONTAINER,
  QWENPAW_LOG_LEVEL env vars (matches Worker entrypoint)
- CMS bootstrap: replace python3 heredoc script with direct heredoc
  (matches Worker), add LOONGSUITE_PYTHON_SITE_BOOTSTRAP_LOG_SUCCESS
  export
- Inject session file privacy policy into AGENTS.md/SOUL.md (matches
  Worker _ensure_session_file_prompt_policy)
- Remove dead PYTHONPATH=/opt/agentteams/copaw/src (path never existed
  in the image; modules are in site-packages)

agent.manager.json:
- Move approval_level into running section (matches QwenPaw 2.0
  AgentProfileConfig schema, default AUTO)

…disable

Six issues found during deep audit with CI script and PR agentscope-ai#1077 cross-reference:

1. pgrep pattern: \|qwenpaw app was a literal pipe in ERE, breaking
   the original copaw pattern. Manager process cmdline is still
   'python3 -m copaw_worker.run_copaw_app app' (runpy.run_module does
   not change /proc/cmdline), so the original agentscope-ai#1077 pattern works.
   Reverted to 'copaw(_worker\.run_copaw_app)? app'.

2. Plugins invisible at runtime: Dockerfile copied plugins to
   /root/manager-workspace/.copaw/plugins/ (build-time), but the
   install script mounts a host volume at /root/manager-workspace,
   hiding build-time files. Now stores plugins in image-local
   /opt/agentteams/plugins/ and copies them at runtime in
   start-qwenpaw-manager.sh (mirrors Worker's _prepare_builtin_plugin).

3. CMS packages in wrong venv: pip install ran while PATH pointed to
   copaw-venv, but Manager runs from qwenpaw venv. Moved CMS install
   after qwenpaw venv creation with /opt/venv/qwenpaw/bin/pip.

4. QA Agent disable silently fails: jq wrote {"enabled": false} but
   AgentProfileRef requires id + workspace_dir. Pydantic validation
   stripped the incomplete profile, then ensure_qa_agent_exists()
   recreated it with enabled=true. Now writes a complete profile.

5. taskflow._current_actor() working dir resolution inconsistent with
   message.py: only checked env vars, no qwenpaw.constant fallback.
   Added _resolve_working_dir() mirroring message.py's logic.

6. plugin.py docstring stale: claimed taskflow/message still import
   copaw.config.config, but commit 974cdf6 already removed that.
   plugin.json type changed from 'general' to 'tool'.