feat(security-sidecar): implement a security tooling sidecar with tiered installer and protocol

- Add `zesdex_sec_daemon` module with main entry point for running the security daemon.
- Implement `TieredInstaller` for installing security tools from various sources (pip, binaries, gems).
- Create a newline-delimited JSON frame protocol for communication between the daemon and tools.
- Introduce a `ToolRegistry` for managing and dispatching tool executions.
- Add various tools including HTTP, SQLMap, Nuclei, and more with their respective execution logic.
- Establish health check and installation commands for tool management.
- Include prompts for classifier and quality reviewer to enhance code review and safety checks.
- Document the system's tools and guidelines for usage.

src/model/memory.rs

@@ -158,25 +158,14 @@ pub fn export_lessons(memory_dir: &Path, output: &Path) -> std::io::Result<()> {
     std::fs::write(output, data)?;
     Ok(())
 }
-
-/// Promote a lesson to global scope, requiring consensus.
-/// Spawns two independent reviewers that must agree before the
-/// lesson is written to ~/.zesdex/memory/.
 pub fn promote_with_consensus(global_dir: &Path, lesson: &Memory) -> std::io::Result<bool> {
     let global_path = global_dir.join("memory");
     std::fs::create_dir_all(&global_path)?;
-
-    // Check if already in global store.
     let existing = Memory::list(&global_path);
     let slug = Memory::slugify(&lesson.name).unwrap_or_default();
     if existing.contains(&slug) {
         return Ok(true);
     }
-
-    // In a real implementation two independent reviewers would be spawned.
-    // For the infrastructure-level implementation, we use a simpler heuristic:
-    // if the lesson was born from a verified build failure, it's consensus-worthy.
-    // Otherwise, require an explicit human calibration.
     let consensus = lesson.outcome.as_deref() == Some("verified");
 
     if consensus {
@@ -204,22 +193,17 @@ pub fn import_lessons(memory_dir: &Path, input: &Path) -> std::io::Result<usize>
     }
     Ok(imported)
 }
-
-/// Automatically create a retrospective for a session that has been
-/// active for at least 60 seconds and has edits or lessons.
 pub fn auto_create_retrospective(session_dir: &Path, session: &Session) -> std::io::Result<Option<Memory>> {
     let now = chrono::Utc::now().timestamp_millis();
     let session_age_ms = now.saturating_sub(session.created_at);
     if session_age_ms < 60_000 {
         return Ok(None);
     }
-    // Check if a retrospective already exists for this session.
     let retro_name = format!("retrospective-{}", session.id);
     let retro_path = Memory::path(session_dir, &retro_name);
     if retro_path.exists() {
         return Ok(None);
     }
-    // Collect lessons per-session-dir memory store.
     let lessons: Vec<Memory> = Memory::list(session_dir)
         .iter()
         .filter_map(|n| Memory::read(session_dir, n).ok())