Add opt-in post-session memory ingestion hooks

[janitor-manager]

Parent: #1

Add opt-in post-session ingestion adapters for supported agent orchestrators.

Acceptance:

• Define the supported Claude and Codex hook/event contracts separately.
• Require explicit opt-in and an explicit target agent_id; never scan or ingest ambient session directories as a hook side effect.
• Read only the exact session artifact supplied by the orchestrator, with regular-file, symlink, size, and format validation.
• Filter tool payloads, credentials, and non-conversation records before submission.
• Make retries safe so one session is not duplicated after an ambiguous transport failure.
• Submit through the public memory-server ingest API with bounded timeouts and redacted diagnostics.
• Add synthetic deterministic tests; do not use live sessions, private memory data, the model, GPU, or a running service.
• Document installation, disablement, and failure behavior for each orchestrator.

The existing scripts/ingest_sessions.py is a bulk maintenance importer and is not this hook.

[janitor-manager]

Contract review found that native adapters are not one safe unit yet:

• Add a closed normalized session-ingest command #8 is the bounded, harness-neutral normalized-input command and is the only implementation unit starting now.
• Add idempotent session identity to memory ingestion #9 adds the idempotent ingest identity required before automatic retries can converge after response loss.
• Add a Codex SessionEnd memory adapter #10 tracks Codex. Official Codex hook docs expose SessionEnd but explicitly say the transcript_path format is not a stable hook interface.
• Add a Claude SessionEnd memory adapter #11 tracks Claude. SessionEnd supplies a transcript path, but the hook contract does not fully define the JSONL record schema required to prove safe conversation-only filtering.
• Add a Prime post-session memory adapter #12 tracks Prime, for which no verified lifecycle/artifact contract is currently available.

The native adapter children are blocked by #9 and their contract-specific blockers. This parent remains open and in Backlog.

[janitor-manager]

Progress update: the harness-neutral normalized ingest command (#8) and retry-safe API idempotency prerequisite (#9) are delivered. The remaining native adapters are intentionally blocked on stable upstream contracts: Codex transcript export (#10), Claude JSONL record schema (#11), and Prime lifecycle/artifact contract (#12). No adapter will parse private rollout internals or guess a filterable schema. Parent remains open in Backlog until at least one supported harness contract is stable.