feat: implement memory and evidence administration with guided repairs

Add PostgreSQL-backed memory, editable evidence with source review and activation, and human-approved archive repairs across the harness, API, and UI. Include migrations, deployment support, regression coverage, and validation documentation.

Refresh permissions from validated session roles so existing administrator logins can access newly deployed archive management features.

harness/tht/evidence/sources.py

@@ -12,10 +12,18 @@ if TYPE_CHECKING:
     from tht.config import EvidenceSourcesConfig
 
 
-def build_sources(evidence: EvidenceSourcesConfig | None) -> list[EvidenceSource]:
+def build_sources(evidence: EvidenceSourcesConfig | None, *, acquisition: bool = False) -> list[EvidenceSource]:
     """Build configured Evidence adapters in the existing deterministic order."""
     if evidence is None:
         return []
+    if evidence.local_archive_root is not None and not acquisition:
+        from tht.evidence.local_archive import LocalEvidenceArchive
+        archive = LocalEvidenceArchive(evidence.local_archive_root)
+        if (archive.metadata / "state.yaml").exists():
+            snapshot = archive.active_snapshot()
+            if snapshot is None:
+                raise ValueError("Local Evidence has not been activated; run Evidence consolidation")
+            return [FilesystemEvidenceSource(snapshot, patterns=("curated/**/*.md",))]
     sources: list[EvidenceSource] = []
     if evidence.source_root is not None:
         legacy_root = evidence.source_root / evidence.evidence_dir