feat: implement memory and evidence administration with guided repairs

Add PostgreSQL-backed memory, editable evidence with source review and activation, and human-approved archive repairs across the harness, API, and UI. Include migrations, deployment support, regression coverage, and validation documentation.

Refresh permissions from validated session roles so existing administrator logins can access newly deployed archive management features.

harness/tests/memory/test_solved_finalization.py

@@ -9,7 +9,7 @@ from tht.session.filesystem_repository import FilesystemSessionRepository
 from tht.session.models import PrincipalContext, SessionManifest
 
 
-def test_finalize_commits_session_before_best_effort_post_commit_read_failure(
+def test_finalize_commits_session_without_implicitly_reading_or_saving_memory(
     tmp_path, monkeypatch, capsys
 ):
     repository = FilesystemSessionRepository(
@@ -83,5 +83,5 @@ def test_finalize_commits_session_before_best_effort_post_commit_read_failure(
 
     captured = capsys.readouterr()
     assert repository.get(session_id).manifest.status == "finalized"
-    assert "finalized snapshot unavailable" in captured.err
+    assert "finalized snapshot unavailable" not in captured.err
     assert f"OK: sessione {session_id} finalizzata" in captured.out