Add full local memory product

[likun666661]

Summary

• add lifecycle-aware local memory entries with proposal review, manual approval/rejection, active-only prompt injection, archive/restore, backups, and core tests
• wire the desktop memory service, IPC/preload surface, and Settings UI to proposal/manual memory workflows
• add main-owned privacy/incognito state and use it for memory, gateway/thread search, web search, and reminder gates
• snapshot active memory into the durable system prompt and send current-turn memory updates through the turn-tail prompt
• add minimal local typings for @jackwener/opencli/* so desktop main typecheck does not rely on untyped package internals

Rive/Codex

• workflow: maka.full-memory-product-v1@1
• run: wfrun_db88587b9b044149afd94a8768e8c299
• scheduler: sched_ed106b58a09741389dd41ce7c89cda1b
• root: work_c0d897d016384fb7b6748549654b5620
• review result was PATCH_REQUIRED; this PR includes the follow-up patch for desktop main typings/typecheck blockers.

Verification

• npm run build --workspace packages/core
• npm run test --workspace packages/core
• npm run build:main --workspace apps/desktop
• npm run typecheck --workspace apps/desktop
• npm run test --workspace apps/desktop (passed on rerun after one transient full-suite failure)
• npm run build --workspace apps/desktop
• node --test dist/main/__tests__/local-memory-service.test.js dist/main/__tests__/ipc-surface-contract.test.js dist/main/__tests__/opencli-contract.test.js dist/main/__tests__/cdp-bridge.test.js
• git diff --check