Add controlled Athena platform operator

platform/operator/athena-operator.service

@@ -0,0 +1,20 @@
+[Unit]
+Description=MikeAI Athena platform operator executor
+After=docker.service data.mount network-online.target
+Wants=docker.service network-online.target
+
+[Service]
+Type=simple
+EnvironmentFile=-/etc/mike-ai/athena-operator.env
+ExecStart=/usr/local/libexec/mike-ai-athena-operatord
+Restart=on-failure
+RestartSec=3
+UMask=0077
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectHome=read-only
+ProtectSystem=full
+ReadWritePaths=/opt/mike-ai/stack /data/mike-ai-operator /data/models /run/mike-ai-operator /data
+
+[Install]
+WantedBy=multi-user.target