fix: v2.0.1 release — fix broken installs, CI, security, and docs

Critical fixes:
- npm postinstall.js: BINARY_VERSION '1.1.3' → '2.0.1' (every install was 404ing)
- npm package name: corrected error messages to 'vestige-mcp-server'
- README: npm install command pointed to wrong package
- MSRV: bumped from 1.85 to 1.91 (uses floor_char_boundary from 1.91)
- CI: removed stale 'develop' branch from test.yml triggers

Security hardening:
- CSP: restricted connect-src from wildcard 'ws: wss:' to localhost-only
- Added X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy headers
- Added frame-ancestors 'none', base-uri 'self', form-action 'self' to CSP
- Capped retention_distribution endpoint from 10k to 1k nodes
- Added debug logging for WebSocket connections without Origin header

Maintenance:
- All clippy warnings fixed (58 total: redundant closures, collapsible ifs, no-op casts)
- All versions harmonized to 2.0.1 across Cargo.toml and package.json
- CLAUDE.md updated to match v2.0.1 (21 tools, 29 modules, 1238 tests)
- docs/CLAUDE-SETUP.md updated deprecated function names
- License corrected to AGPL-3.0-only in root package.json

1,238 tests passing, 0 clippy warnings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docs/CLAUDE-SETUP.md

@@ -71,7 +71,7 @@ Use `codebase` → `remember_pattern`:
 | "Don't forget" | `smart_ingest` with high priority |
 | "I always..." / "I never..." | Save as preference |
 | "I prefer..." / "I like..." | Save as preference |
-| "This is important" | `smart_ingest` + `promote_memory` |
+| "This is important" | `smart_ingest` + `memory(action="promote")` |
 | "Remind me..." | Create `intention` |
 | "Next time..." | Create `intention` with context trigger |
 
@@ -148,11 +148,11 @@ smart_ingest(
 At the end of significant conversations:
 1. Reflect: "Did anything change about how I understand myself?"
 2. If yes, update identity memories with `smart_ingest`
-3. Prune outdated self-concepts with `demote_memory`
+3. Prune outdated self-concepts with `memory(action="demote")`
 
 ### Memory Hygiene
-- Use `promote_memory` when a memory proves valuable
-- Use `demote_memory` when a memory led you astray
+- Use `memory(action="promote")` when a memory proves valuable
+- Use `memory(action="demote")` when a memory led you astray
 ```
 
 ---
@@ -199,7 +199,7 @@ You have persistent memory via Vestige. Use it intelligently:
 - Notice a pattern? `codebase(action="remember_pattern")`
 - Made a decision? `codebase(action="remember_decision")` with rationale
 - I mention a preference? `smart_ingest` it
-- Something important? `importance()` to strengthen recent memories
+- Something important? `importance_score` to check if worth saving
 - Need to follow up? `intention(action="set")`
 
 ### Session End
@@ -208,8 +208,8 @@ You have persistent memory via Vestige. Use it intelligently:
 - Anything change about our working relationship? Update identity memories
 
 ### Memory Hygiene
-- When a memory helps: `promote_memory`
-- When a memory misleads: `demote_memory`
+- When a memory helps: `memory(action="promote")`
+- When a memory misleads: `memory(action="demote")`
 - Weekly: `vestige health` to check system status
 ```