workstation: wire-memory-hooks as root (fix non-admin wiring)
workstation: homelab-memory for all users (retire claude-memory MCP)
workstation: homelab-memory for all users (retire claude-memory MCP)
docs: memory via homelab CLI (retire memory-tool/MCP refs)
docs: memory via homelab CLI (retire memory-tool/MCP refs)
docs: CrowdSec enforcement = firewall-bouncer + CF WAF (plugin removed)
docs: CrowdSec enforcement = firewall-bouncer + CF WAF (plugin removed)