feat: pre-install all channel plugins, add SOUL.md onboarding prompt, admin console demo

CloudFormation (clawdbot-bedrock.yaml):
- Pre-install WhatsApp, Telegram, Discord, Slack + Feishu community plugin
- Create SOUL.md with first-message onboarding: AI guides user to connect their preferred platform
- All plugin installs have error handling, run after CFN signal (no deployment risk)

Admin Console (demo/console.py):
- Visual management console: dashboard, tenant management, approval queue, audit log, live demo
- Single-file Python server with embedded HTML/CSS/JS, no build tools
- Dark theme, responsive, professional UI
- Interactive: edit permissions, approve/reject requests, send messages as different tenants

Documentation:
- README.md + README_CN.md: added onboarding callout after deployment screenshot
- README_AGENTCORE.md: rewritten with 7 value propositions, SaaS/MSP vision
- ROADMAP.md: target v1.0 June 2026
- demo/README.md: covers all 3 demos (console, terminal, AWS)

Gateway (src/gateway/tenant_router.py):
- Added local container mode (AGENT_CONTAINER_URL) for demo/testing without AgentCore

Author: JiaDe

.DS_Store

@@ -46,6 +46,8 @@ Deploy in 8 minutes. Access from your phone.
 
 ![CloudFormation Outputs](images/20260305-215111.png)
 
+> 🦞 **Just open the Web UI and say hi.** All messaging plugins (WhatsApp, Telegram, Discord, Slack, Feishu) are pre-installed. Tell your OpenClaw which platform you want to connect — it will guide you through the entire setup step by step. No manual configuration needed.
+
 ```bash
 # 1. Install SSM Session Manager Plugin (one-time)
 #    https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-working-with-install-plugin.html

README.md

@@ -141,6 +141,23 @@ A team agent can ask its members' agents for status updates. A department agent
 
 ![OpenClaw Multi-Tenant Admin Console](images/20260305-214028.jpeg)
 
+### Try It Now
+
+```bash
+# Visual admin console (no AWS needed)
+python3 demo/console.py
+# Open http://localhost:8099
+
+# Terminal demo (7 scenarios)
+python3 demo/run_demo.py
+
+# AWS demo (real Bedrock inference, requires EC2)
+bash demo/setup_aws_demo.sh
+python3 demo/aws_demo.py
+```
+
+The admin console lets you manage tenants, edit permissions, approve requests, view audit logs, and send live messages as different tenants — all in the browser. **[→ Demo Guide](demo/README.md)**
+
 ---
 
 ## How It Works Today

README_AGENTCORE.md

@@ -44,6 +44,8 @@
 
 ### 部署后操作
 
+> 🦞 **打开 Web UI，直接和 AI 说话就行。** 所有消息平台插件（WhatsApp、Telegram、Discord、Slack、飞书）已预装。告诉你的 OpenClaw 你想用什么方式连接，它会一步步指导你完成全部配置，无需手动操作。
+
 ```bash
 # 1. 安装 SSM Session Manager 插件（一次性）
 #    https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-working-with-install-plugin.html

README_CN.md

@@ -28,6 +28,7 @@ Target: **v1.0 by June 2026** — a production-ready multi-tenant OpenClaw platf
 - CloudFormation: EC2 + ECR + SSM + CloudWatch (one stack)
 - Gateway Tenant Router: tenant_id derivation, AgentCore Runtime invocation
 - Auth Agent input validation: 7 prompt injection patterns on approval messages
+- Admin Console: visual management UI (dashboard, tenant permissions, approvals, audit log, live demo)
 
 ---
 

ROADMAP.md

@@ -640,23 +640,61 @@ Resources:
           export NVM_DIR="$HOME/.nvm"
           [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
 
-          # Enable WhatsApp
+          # Core channels (built-in)
           openclaw plugins enable whatsapp || echo "WhatsApp plugin enable failed"
-          
-          # Enable Telegram
           openclaw plugins enable telegram || echo "Telegram plugin enable failed"
-          
-          # Enable Discord
           openclaw plugins enable discord || echo "Discord plugin enable failed"
-          
-          # Enable Slack
           openclaw plugins enable slack || echo "Slack plugin enable failed"
 
-          # iMessage and Google Chat disabled (not available on Linux)
-          # openclaw plugins enable imessage
-          # openclaw plugins enable googlechat
+          # Feishu/Lark (community plugin)
+          npm install -g openclaw-feishu@latest --timeout=60000 2>/dev/null || echo "Feishu plugin install skipped"
           '
           
+          # Create SOUL.md — first-message onboarding prompt
+          sudo -u ubuntu cat > /home/ubuntu/.openclaw/SOUL.md << 'SOUL_EOF'
+          # OpenClaw on AWS
+
+          You are an AI assistant running on AWS with Amazon Bedrock. You are helpful, concise, and friendly.
+
+          ## First Conversation
+
+          When a user sends their very first message (no prior conversation history), start by warmly greeting them and then help them connect a messaging platform. Say something like:
+
+          "Welcome! I'm your AI assistant running on AWS. Before we dive in, let's connect me to your favorite messaging app so you can chat with me anytime.
+
+          Which platform would you like to connect?
+          1. 📱 WhatsApp — scan a QR code from your phone
+          2. ✈️ Telegram — create a bot via @BotFather
+          3. 🎮 Discord — add me to your server
+          4. 💼 Slack — install me in your workspace
+          5. 🐦 Feishu/Lark — connect via webhook bridge
+
+          Just reply with a number or platform name, and I'll walk you through the setup step by step."
+
+          After the user chooses, guide them through the specific setup:
+
+          **WhatsApp**: Tell them to go to the Web UI (Channels → Add Channel → WhatsApp), then on their phone: WhatsApp → Settings → Linked Devices → Link a Device → scan the QR code.
+
+          **Telegram**: Tell them to message @BotFather on Telegram, send /newbot, choose a name and username (must end with 'bot'), copy the token, then paste it in Web UI (Channels → Add Channel → Telegram).
+
+          **Discord**: Tell them to visit discord.com/developers/applications, create a new app, go to Bot → Add Bot, copy the token, enable Message Content Intent, generate an invite URL, then paste the token in Web UI (Channels → Add Channel → Discord).
+
+          **Slack**: Tell them to visit api.slack.com/apps, create a new app, add bot scopes (chat:write, channels:history), install to workspace, copy the Bot User OAuth Token, then paste in Web UI (Channels → Add Channel → Slack).
+
+          **Feishu/Lark**: Tell them this uses a community bridge plugin. They need to configure their Feishu bot credentials in the Web UI. Point them to the docs: https://docs.openclaw.ai/channels or the community plugin page.
+
+          ## Ongoing Conversations
+
+          After the first conversation, be a helpful general-purpose assistant. You can:
+          - Answer questions using web search
+          - Help with coding, writing, analysis
+          - Manage tasks and reminders
+          - Process files and documents
+
+          Be concise. Get to the point. If there's a good answer, give it directly.
+          SOUL_EOF
+          chown ubuntu:ubuntu /home/ubuntu/.openclaw/SOUL.md
+          
           # Save token to SSM Parameter Store (encrypted, never written to disk)
           STACK_NAME="${AWS::StackName}"
           aws ssm put-parameter \