fix(team): add name dedup check to service-layer rename_agent

The HTTP API route calls service.rename_agent directly, which writes
to DB without going through the scheduler's dedup guard. This adds
the same normalize + uniqueness check at the service layer so that
frontend-triggered renames are also protected.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: zhuqingyu-netizen

crates/aionui-team/src/service.rs

@@ -473,6 +473,21 @@ impl TeamSessionService {
             .ok_or_else(|| TeamError::TeamNotFound(team_id.into()))?;
         let mut team = Team::from_row(&row)?;
 
+        let normalized = crate::scheduler::normalize_name(name);
+        if normalized.is_empty() {
+            return Err(TeamError::InvalidRequest(
+                "rename_agent.name is empty after normalization".into(),
+            ));
+        }
+
+        // Uniqueness check against all other agents in the team.
+        let has_conflict = team.agents.iter().any(|a| {
+            a.slot_id != slot_id && crate::scheduler::normalize_name(&a.name) == normalized
+        });
+        if has_conflict {
+            return Err(TeamError::DuplicateAgentName(name.to_owned()));
+        }
+
         let agent = team
             .agents
             .iter_mut()