feat: expand companion platform, device controls, and memoir workflows

Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.

internal/memorytool/service.go

@@ -101,6 +101,8 @@ func (s *Service) Search(ctx context.Context, claims Claims, query string, limit
 		return Response{}, err
 	}
 	defer tx.Rollback(context.Background())
+	// This legacy tool has no authenticated current USER utterance binding.
+	// It cannot widen access to RESPOND_ONLY just because the model invoked it.
 	memories, err := retrieval.SelectMemoryForContextVector(ctx, tx, scope.tenantID, scope.subjectID, vector, limit)
 	if err != nil {
 		return Response{}, err
@@ -108,9 +110,9 @@ func (s *Service) Search(ctx context.Context, claims Claims, query string, limit
 	items := make([]Result, 0, len(memories))
 	totalRunes := 0
 	for _, memory := range memories {
-		content := trimRunes(memory.Content, 240)
+		content := strings.TrimSpace(memory.Content)
 		if totalRunes+utf8.RuneCountInString(content) > 800 {
-			break
+			continue
 		}
 		totalRunes += utf8.RuneCountInString(content)
 		items = append(items, Result{MemoryID: memory.MemoryID, MemoryVersionID: memory.MemoryVersionID, VersionNo: memory.VersionNo, Content: content, SourceRefs: memory.SourceRefs, Relevance: memory.Relevance})