restore: memory.db (memories/skills/ledger, not just keys) + Dockerfile COPY

security: remove vault/runtime databases from the Space

Squash history — remove all prior commits (secret hygiene, S4)