feat(goose): complete v1.49 phase3 closeout gates and context fusion plan

Expand Goose v1.49 smoke coverage (memory chat, portal resume, page e2e,
multiturn provider), add canary memory policy lock, refresh baselines, and
ignore one-off evidence artifacts. Document headroom-based context runtime
fusion plan; include auth, scheduled-task, and wechat intent fixes on branch.

Co-authored-by: Cursor <cursoragent@cursor.com>

memory-v2-runtime.test.mjs

@@ -1,6 +1,33 @@
 import assert from 'node:assert/strict';
 import test from 'node:test';
 import { createManagedMemoryV2Runtime, createMemoryV2Runtime } from './memory-v2-runtime.mjs';
+import { assertGooseCanaryMemoryStatus } from './goose-canary-memory-policy.mjs';
+
+test('local Goose canary overrides admin memory settings and restores them when disabled', async () => {
+  const env = { TKMIND_GOOSE_CANARY: 'all', MEMORY_ENABLED: '1' };
+  const overrides = {
+    MEMORY_BACKEND: 'pgvector', MEMORY_VECTOR_ENABLED: '1',
+    MEMORY_CANDIDATE_ENABLED: '1', MEMORY_CANDIDATE_MODE: 'active',
+    MEMORY_AGENT_RESOLVE_ENABLED: '1', MEMORY_AGENT_INJECTION_MODE: 'active',
+    MEMORY_LIFECYCLE_ENABLED: '1', MEMORY_LIFECYCLE_WORKER_ENABLED: '1',
+    MEMORY_LIFECYCLE_ROLLOUT_MODE: 'active', MEMORY_PROMOTION_ENABLED: '1',
+  };
+  const runtime = await createManagedMemoryV2Runtime({
+    env, legacyMemoryService: legacyService(), logger: silentLogger(),
+    configService: { async getRuntimeState() { return { source: 'admin-db', fingerprint: 'same', overrides }; } },
+  });
+  try {
+    const status = await runtime.getStatus();
+    assertGooseCanaryMemoryStatus(status);
+    assert.equal(status.configSource, 'goose-canary:admin-db');
+    assert.equal(overrides.MEMORY_BACKEND, 'pgvector');
+    env.TKMIND_GOOSE_CANARY = 'off';
+    const restored = await runtime.getStatus();
+    assert.equal(restored.backend, 'pgvector');
+    assert.equal(restored.configSource, 'admin-db');
+    assert.throws(() => assertGooseCanaryMemoryStatus(restored), /requires legacy/);
+  } finally { await runtime.close(); }
+});
 
 function silentLogger() {
   return {