feat(mindspace): add page quota grace write and local delivery guardrails.

Centralize page HTML quota checks with grace-write semantics across page
services and workspace tools, keep localhost MindSpace links clickable in
chat display, and expand Page Data/static-page skill plus local dev docs
for quota, delivery URLs, and native Aider/OpenHands tooling.

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.example

@@ -65,6 +65,22 @@ H5_PUBLIC_BASE_URL=http://127.0.0.1:5173
 # MEMIND_AGENT_RUN_WORKER_ID=<optional-instance-id>
 # MEMIND_AGENT_RUN_WORKER_EXPECT_RUNNING=0
 
+# 本机 Aider / OpenHands（Colima 迁出后走 native CLI，见 memind-local-aider / memind-local-openhands）
+# AIDER_BIN=/Users/john/.local/bin/aider
+# GOOSE_AIDER_BIN=/Users/john/.openhands/bin/studio-aider
+# OPENHANDS_BIN=/Users/john/.local/bin/openhands
+# GOOSE_AIDER_BIN=/Users/john/Project/Memind/scripts/aider-goose-wrapper.sh
+# GOOSE_OPENHANDS_BIN=/Users/john/Project/Memind/scripts/openhands-goose-wrapper.sh
+# GOOSE_OPENHANDS_RUNNER=host
+# 本地开发：普通用户 role=user 默认开启 aider/openhands；生产保持 0
+# MEMIND_ROLE_CODE_TOOLS_DEFAULT=0
+# MEMIND_TOOL_GATEWAY_ENABLED=0
+# MEMIND_TOOL_GATEWAY_DRY_RUN=0
+# MEMIND_TOOL_GATEWAY_DEFAULT_EXECUTOR=aider
+# Orchestrator worker（memind-local-orchestrator/.env 同步）OpenHands 进程执行器：
+# MEMIND_EXECUTOR_OPENHANDS_COMMAND=/Users/john/Project/Memind/scripts/openhands-goose-wrapper.sh
+# MEMIND_EXECUTOR_WORKSPACE_ROOT=/Users/john/Project/Memind
+
 # LangGraph Orchestrator Shadow（默认完全不接入 Agent Run 请求路径）。
 # 仅在独立 Orchestrator 已健康、service token 已配置后，先显式打开观察 wiring，
 # 再通过 memindadm 选择 shadow。关闭 wiring 时不查询编排配置、不排队、不传用户数据。
@@ -331,6 +347,10 @@ VITE_TKMIND_WORKING_DIR=/Users/john/PycharmProjects/tkmind
 # MindSearch / standalone Deep Search
 # ---------------------------------------------------------------------------
 # Production SearXNG on 103 is bound to the host at 127.0.0.1:20080.
+# Outbound proxy for DuckDuckGo/Yandex lives in searxng-runtime shared config:
+#   /Users/john/Project/searxng-runtime/shared/.env
+#   SEARXNG_OUTGOING_PROXY=http://127.0.0.1:1082  (Shadowrocket MacPacket)
+# Template source: /Users/john/Project/searxng-prod/settings.yml.template
 # Goosed MCP endpoints are automatically rewritten to host.docker.internal.
 # TKMIND_SEARCH_SEARXNG_URL=http://127.0.0.1:20080/search
 # TKMIND_SEARCH_MCP_HOST_GATEWAY=host.docker.internal