feat: add portable local memory runtime

[DECK6]

Summary

• Add a reusable AKM local-memory contract and JSON Schema to the public core.
• Add an independent MIT-compatible Hermes Python adapter with candidate review, scoped recall, guarded forget/restore, bounded context packs, delta cursors, reconciliation, doctor, and holdout evaluation.
• Publish portable operator/evaluation guidance inside the tracked adapter package, preserving public core policy that instance 50-procedures/ and 70-evaluation/ remain ignored.
• Add public index/log routing and explicit gbrain provenance/adaptation boundary.

Verification

• memory runtime tests: 32 passed
• enforcement tests: 11/11 passed
• lint tests: 7/7 passed
• AKM lint: 0 errors, 0 warnings
• links lint: 0 errors, 0 warnings
• secrets lint: 0 errors, 0 warnings
• JSON schema parse and Python compile: pass
• staged added-line scan found no personal absolute paths, private-vault handles, runtime data, credentials, qmd/Graphify personal state, devlogs, or execution contracts
• git diff --cached --check: pass

Provenance and safety

The design adapts selected memory lifecycle, durable forget-fence, bounded-context, and delta/cursor concepts from gbrain commit 1ec6a6e842a15f2bde2ebe8c3a686a6fa6b17aa5 under MIT terms. It is an independent Python implementation and does not copy/vendor gbrain source or adopt a database-first authority model.

Global prompt injection stays HOLD; automatic canonical promotion is prohibited; runtime state must live outside the repository.