maven: scheduled routines + persistent long-term memory

Two additive proactive/recall features.

Routines (internal/routine): a third proactive class beside reminders
(user-stated) and care rules (world-state) — operator-declared clockwork.
config.routines[] (cron + literal RU body + severity) fire through the
normal dispatcher on schedule. Bodies are literal, not LLM-phrased (can't
hallucinate); rule name routine:<name> keeps them out of the care
autotuner; a cold-start guard seeds on first sight so a restart never
replays a missed schedule. Pure routine.Due + config validation, unit-
tested; the tick driver holds the last-fired map and calls fireRoutines.

Persistent memory (internal/store/memory.go): store.MemoryStore backs the
memory.Store interface with the SAME encrypted sqlite db — survives
restarts and recall text inherits at-rest encryption (no plaintext
sidecar). float32-blob vectors, brute-force cosine (ANN is a later swap
behind the interface), upsert-by-id. The daemon wires st.VectorMemory()
into wireVoice; the in-memory impl stays the test/no-store floor. Closes
the "in-memory only, lost on restart" gap (PROGRESS #8).

Gate green: gofmt/vet clean, -race across routine/config/store/mavend.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01U2PNdwDj2Gt8YW294J7oSc

PROGRESS.md

@@ -44,6 +44,14 @@ tests, `-race` in `make test`.
   auto-tuner (outcome ratio → bounded cooldown, persisted as `source=feedback`).
 - **Rules:** water/meal/break (sev1–2 care), service_down (sev4, `poll:uptimekuma`),
   netdata_critical (sev3, `poll:netdata`).
+- **Routines (`internal/routine`):** operator-declared clockwork — the third
+  proactive class beside reminders (user-stated) and care rules (world-state).
+  Config `routines[]` (cron + literal RU body + severity) fire through the normal
+  dispatcher on schedule (an 08:00 briefing, a 22:00 wind-down). Bodies are
+  literal (not LLM-phrased ⇒ can't hallucinate); rule name `routine:<name>` so
+  they don't pollute the care autotuner; cold-start guard seeds on first sight so
+  a restart never replays a missed schedule. Pure `routine.Due`, unit-tested; the
+  tick driver holds the last-fired map.
 - **Env facts (`mavpoll`):** netdata alarms → `netdata_alarm` (fires immediately
   on a real CRITICAL); kuma monitor_status → `service_down`. Writes only on
   value-change (no append-only churn).
@@ -260,13 +268,17 @@ Capability-class gaps — built but thin:
    "clarify".
 7. **Presence is effectively one signal** (page_heartbeat); desk_active is
    still an undeployed script — "voice when near" routing runs on a guess.
-8. **Long-term memory is in-memory only, not the spec's chroma.** `internal/
-   memory` (jul6 task 7 + follow-up) has a `Store` interface + in-memory cosine
-   impl; notes **and facts** are indexed on capture, and `IntentQuery` now reads
-   it back (after notes-RAG misses, before general-knowledge) — fact recall
-   («когда я пил воду?») is its distinct payoff. Still missing: a persistent/
-   external vector backend (the store is lost on restart) — the read seam is
-   there to swap onto one. Persona prompt and custom TTS voice (kami-picked,
+8. **Long-term memory is now persistent (store-backed), not the spec's chroma.**
+   `internal/memory` has a `Store` interface; the daemon now wires
+   `store.MemoryStore` (`internal/store/memory.go`) — a **persistent** backend
+   in the **same encrypted sqlite db** (survives restarts; recall text inherits
+   at-rest encryption, so no plaintext sidecar). Vectors are float32 blobs,
+   search is brute-force cosine (fine at single-user scale; ANN is the later
+   swap behind the same interface). Notes **and facts** are indexed on capture;
+   `IntentQuery` reads it back (after notes-RAG misses, before general-knowledge)
+   — fact recall («когда я пил воду?») is its distinct payoff. The in-memory
+   impl remains the test/no-store floor. Remaining: an ANN/external index is
+   optional-scale, not a gap. Persona prompt and custom TTS voice (kami-picked,
    replaces the irina floor — [[custom-voice-training]]) are still future items.
 
 Ops footnote: in the Docker deploy, voice-over-web needs mavend to bind its