feat(memory): dual-pool memory namespace, FTS search, and prompt injection

Add a virtual memory namespace backed by SQLite, surfaced through the
fs-tools, with private (per-user) and shared (system) stores.

Storage
- `memory_docs` owner table + external-content FTS5 index with sync triggers.
- `db/memory_docs.rs` accessor: get / upsert / list / search (bm25+snippet) / delete.

Routing (tools/fs)
- `classify_memory` splits paths on the raw first component; `..` clamps inside
  the store, never escaping to disk.
- read/write/list/edit/insert/replace/search_file route `user-memory/` to the
  owner pool and `shared-memory/` to the system pool (a singleton captured in
  `register_all`); every other path stays on disk. Each tool extracts a pure
  transform shared between its disk and memory paths.
- New `memory_search` tool over the FTS index (scope private/shared/all),
  with a sanitised FTS5 query. grep_files stays disk-only.

Approval
- `user-memory/*` allow (read+write); `shared-memory/*` reads allow,
  writes require approval so the agent can't silently push one person's data
  into shared memory. `memory_search` allowed via a path-less rule.
- migrate away the old `memory/*` and blanket `shared-memory/*` rows.

Prompt injection
- `MessageBuilder::load_inject_memory` reads `user-memory/` (owner pool) and
  `shared-memory/` (system pool) inject entries from SQLite; disk paths
  unchanged. The system pool is threaded ChatSessionManager -> handler ->
  MessageBuilder.
- main and project-coordinator inject `user-memory/index.md` +
  `shared-memory/index.md`; common/memory.md rewritten for the two stores.

crates/skald-core/src/skald/bundles.rs

@@ -204,9 +204,9 @@ impl Tools {
     /// Captures sibling managers (mcp, plugins, cron, secrets) into the tool
     /// registry. `execute_task` is deliberately NOT registered here — it is injected
     /// per interactive session by `ChatHub::send_message`.
-    pub(super) fn build(integrations: &Integrations, tasks: &Tasks, models: &Models) -> Self {
+    pub(super) fn build(rt: &Runtime, integrations: &Integrations, tasks: &Tasks, models: &Models) -> Self {
         let mut tool_registry = ToolRegistry::new();
-        crate::tools::fs::register_all(&mut tool_registry);
+        crate::tools::fs::register_all(&mut tool_registry, Arc::clone(&rt.db));
         tool_registry.register(crate::tools::ast_outline::AstOutline::new());
         tool_registry.register(crate::tools::exec::ExecuteCmd);
         tool_registry.register(crate::tools::read_notification::ReadNotification);
@@ -338,6 +338,7 @@ impl Conversation {
 
         let manager = Arc::new(ChatSessionManager::new(
             Arc::clone(&rt.db),
+            Arc::clone(&rt.db), // shared pool == system.db (this is the ownerless manager)
             String::new(),
             Arc::clone(&models.llm_manager),
             config.llm.max_history_messages,

crates/skald-core/src/skald/mod.rs

@@ -66,7 +66,7 @@ impl Skald {
         let media        = Media::build(&rt, &models).await?;
         let integrations = Integrations::build(&rt, plugins);
         let tasks        = Tasks::build(&rt, config);
-        let tools        = Tools::build(&integrations, &tasks, &models);
+        let tools        = Tools::build(&rt, &integrations, &tasks, &models);
         let interaction  = Interaction::build(&rt, &tools).await?;
         let conversation = Conversation::build(&rt, &models, &media, &tools, &integrations, &interaction, config).await?;
         let infra        = Infra::build();

crates/skald-core/src/skald/user_context.rs

@@ -159,6 +159,7 @@ impl UserContextFactory {
 
         let manager = Arc::new(ChatSessionManager::new(
             Arc::clone(&pool),
+            Arc::clone(&self.registry_pool), // shared pool = system.db, for shared-memory injection
             user_id.to_string(),
             Arc::clone(&self.llm_manager),
             self.max_history_messages,