feat: add verified memory contracts

[EvanProgramming]

Summary

• add typed owner and inferred memory claims with deterministic global/profile/project/task scope
• keep inferred claims pending until repeated evidence and flag equal-scope conflicts for clarification
• add negative regression preflights, profile-aware retrieval, explanations, and dependency-complete forgetting

Security

• reject secret-bearing claims
• preserve workspace/profile isolation and learned-artifact permission limits
• owner deletion deactivates dependent learned behavior and regression cases

Validation

• make check
• KYROZEN_DB_PATH=/state.sqlite3 make test (41 tests)
• memory claim API smoke
• benchmark replay unittest
• git diff --check