fix: v2.0.1 release — fix broken installs, CI, security, and docs

Critical fixes:
- npm postinstall.js: BINARY_VERSION '1.1.3' → '2.0.1' (every install was 404ing)
- npm package name: corrected error messages to 'vestige-mcp-server'
- README: npm install command pointed to wrong package
- MSRV: bumped from 1.85 to 1.91 (uses floor_char_boundary from 1.91)
- CI: removed stale 'develop' branch from test.yml triggers

Security hardening:
- CSP: restricted connect-src from wildcard 'ws: wss:' to localhost-only
- Added X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy headers
- Added frame-ancestors 'none', base-uri 'self', form-action 'self' to CSP
- Capped retention_distribution endpoint from 10k to 1k nodes
- Added debug logging for WebSocket connections without Origin header

Maintenance:
- All clippy warnings fixed (58 total: redundant closures, collapsible ifs, no-op casts)
- All versions harmonized to 2.0.1 across Cargo.toml and package.json
- CLAUDE.md updated to match v2.0.1 (21 tools, 29 modules, 1238 tests)
- docs/CLAUDE-SETUP.md updated deprecated function names
- License corrected to AGPL-3.0-only in root package.json

1,238 tests passing, 0 clippy warnings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

crates/vestige-core/src/consolidation/phases.rs

@@ -333,11 +333,10 @@ impl DreamEngine {
         emotion: &EmotionCategory,
     ) -> TriageCategory {
         // High emotional content
-        if matches!(emotion, EmotionCategory::Frustration | EmotionCategory::Urgency | EmotionCategory::Joy | EmotionCategory::Surprise) {
-            if node.sentiment_magnitude > 0.4 {
+        if matches!(emotion, EmotionCategory::Frustration | EmotionCategory::Urgency | EmotionCategory::Joy | EmotionCategory::Surprise)
+            && node.sentiment_magnitude > 0.4 {
                 return TriageCategory::Emotional;
             }
-        }
 
         // Future-relevant (intentions, TODOs)
         let content_lower = node.content.to_lowercase();
@@ -386,7 +385,7 @@ impl DreamEngine {
             .collect();
 
         // Process replay queue in oscillation waves
-        let wave_count = (replay_queue.len() + self.wave_batch_size - 1) / self.wave_batch_size;
+        let wave_count = replay_queue.len().div_ceil(self.wave_batch_size);
 
         for wave_idx in 0..wave_count {
             let wave_start = wave_idx * self.wave_batch_size;
@@ -659,8 +658,8 @@ impl DreamEngine {
             if indices.len() >= 3 && indices.len() <= 10 {
                 pattern_count += 1;
                 // Create a connection between the first and last memory sharing this pattern
-                if let (Some(&first), Some(&last)) = (indices.first(), indices.last()) {
-                    if first != last {
+                if let (Some(&first), Some(&last)) = (indices.first(), indices.last())
+                    && first != last {
                         connections.push(CreativeConnection {
                             memory_a_id: triaged[first].id.clone(),
                             memory_b_id: triaged[last].id.clone(),
@@ -672,7 +671,6 @@ impl DreamEngine {
                             connection_type: CreativeConnectionType::CrossDomain,
                         });
                     }
-                }
             }
         }