Brings in v0.42.55.0–v0.42.57.0 (security-hardening pass, Life Chronicle
temporal spine, PGLite live-lock-steal incident fix).
Conflicts resolved:
- VERSION / package.json: kept 0.43.0.0 (Cathedral 1 — higher semver wins);
auto-merged master's new check:search-path npm script.
- CHANGELOG.md / TODOS.md: kept both sides (ours on top, master's below).
- src/commands/serve.ts: runServeHttp call keeps BOTH new options —
enableDcrInsecure (master, #1353) and surface (ours, MEMORY_VERBS v1).
Verified: 3-line version audit agrees on 0.43.0.0; bun.lock unchanged
(no dep changes); bun run typecheck clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
