Add trusted experience compiler and memory firewall

[CaspianG]

Summary

• add shadow, canary, active, reject, expiry, delete, and rollback lifecycle backed by immutable validation receipts
• compile token-budgeted Experience Packets with hybrid scoring, explainable signals, citations, provenance, and progressive disclosure
• enforce trust classes, quarantine, taint detection, namespace isolation, conflict handling, protected-memory consent, export, and delete policy
• add a hard memory-safety gate with 250 attack cases and 25 safe controls

Validation

• 74 passed across experience compiler, safety, persistence, API, and MCP tests
• full wavemind Ruff check passed
• git diff --check passed