Improve wiki memory canonical flow, context packs, session capture, and search UX

[humandebri]

Purpose

This PR consolidates Kinic Wiki memory guidance around a clearer source-to-memory flow, expands portable context export support, and improves agent/browser workflows that rely on raw source evidence.

The main goal is to make wiki memory easier to trust and reuse:

• raw evidence stays under /Sources/raw/...
• reviewed role pages under /Wiki/... become the agent memory layer
• source evidence carries freshness metadata
• browser and agent session captures can be preserved as raw sources
• search and context-pack workflows expose more precise controls

Changes

Agent Memory And Canonical Wiki Roles

• Moves the practical trust model and note-role contract into docs/AGENT_MEMORY_API.md.
• Removes the old standalone docs/internal/WIKI_CANONICALITY.md.
• Expands canonical roles returned by the memory manifest:
  • facts.md
  • events.md
  • plans.md
  • preferences.md
  • open_questions.md
  • summary.md
  • provenance.md
• Updates wiki skills to reference the Agent Memory API as the current role/trust contract.
• Adds source freshness metadata to source evidence refs:
  • source_etag
  • source_updated_at
  • source_content_hash

Context Pack Export

• Adds OKF Context Pack CLI support for exporting, verifying, and inspecting /Wiki/... scopes.
• Adds kinic-context-pack skill documentation.
• Verifies exported concept body hashes so tampered bundle content is detected.
• Keeps raw source bodies out of portable reference concepts.

Agent Tool Safety

• Adds read-only OpenAI and Anthropic tool dispatchers.
• Read-only dispatch now rejects unexpected write tools even if a caller forwards one.
• Documents the read-only dispatcher behavior in docs/AGENT_TOOL_CALLING.md.

Session Capture Plugins

• Adds Claude Code and Codex session capture hooks/scripts.
• Adds shared runtime support for persisting agent transcripts as raw source nodes.
• Adds Codex transcript parsing with redaction and encrypted reasoning omission.
• Keeps failed writes in pending session queues for later retry.

Wiki Clipper Active-Tab Capture

• Changes active-tab capture from URL ingest requests to direct raw web source capture.
• Uses stable URL-derived raw source paths under /Sources/raw/web/....
• Adds tab badge refresh for already-saved pages.
• Toolbar clicks now refresh existing same-URL sources instead of stopping at "already saved", so updated page content can be captured and generation can be queued again.
• Updates extension docs and tests for the active-tab capture flow.

Wiki Browser Search And Display

• Adds search options for:
  • scope
  • custom prefix
  • top-k
  • preview mode
• Preserves search options in search URLs and database switching.
• Adds UI helpers for folder index display paths.
• Adds trust/frontmatter banner support in markdown preview.
• Updates Candid shape checks and VFS client normalization for the expanded evidence shape.

Verification

• git diff --check
• npm test -- --test-name-pattern service-worker in extensions/wiki-clipper
• Existing/updated Rust and UI tests cover:
  • memory manifest canonical roles
  • source evidence freshness metadata
  • read-only tool dispatch rejection
  • Context Pack content hash verification
  • Wiki Clipper active-tab refresh behavior
  • search URL option preservation
  • Candid shape updates

Impact

• Existing raw source paths and wiki pages remain readable.
• Agent memory consumers receive richer source evidence metadata.
• Active-tab capture now updates existing same-URL raw sources, which is important for pages whose content changes without URL changes.
• The removed canonicality document is replaced by docs/AGENT_MEMORY_API.md as the single practical trust-model reference.