feat: multi-persona support (single Cortex, multiple users)

- Add cortex/persona.py: ContextVar-based per-request routing with
  path traversal protection and persona validation
- Migrate inara/ → personas/inara/ (git history preserved via git mv)
- config.py: add personas_root(), inara_path() delegates to personas/inara
- All 14 settings.inara_path() call sites replaced with persona_path()
- ChatRequest + OrchestrateRequest: add persona field (default: "inara")
  with validation at request entry before any processing
- memory_distiller: add optional persona param for future per-persona distill
- cron_runner/tools/cron: stamp persona on jobs, prefix APScheduler IDs
  (persona:job_id) to prevent collisions across personas
- scheduler: _load_user_crons() iterates all personas at startup

Adding a new persona: create personas/<name>/ with IDENTITY.md + SOUL.md.
Auth: handled at nginx level (inject X-Cortex-Persona header per subdomain).
Future: persona maps to Aether account_id_random for full integration.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

personas/inara/sessions/2026-03-05.md

@@ -0,0 +1,128 @@
+# Session Log — 2026-03-05
+
+### [23:42] `051d6908`
+**Scott:** Please respond with some Markdown so we can make sure it renders.
+
+**Inara:** # Markdown Rendering Test ✨
+
+Here's a little showcase to confirm everything renders properly.
+
+---
+
+## Text Formatting
+
+This is **bold**, this is *italic*, and this is ~~strikethrough~~. Inline `code` looks like this.
+
+## Lists
+
+**Unordered:**
+- Cortex orchestration layer
+- WireGuard mesh networking
+- Self-hosted everything
+
+**Ordered:**
+1. Request
+2. Acknowledge
+3. Result
+
+## Code Block
+
+```python
+def greet(name: str) -> str:
+    return f"Hello from Inara, {name}."
+
+print(greet("Scott"))
+```
+
+## Table
+
+| Agent ID     | Machine       | Role                  |
+|--------------|---------------|-----------------------|
+| `scott_lpt`  | Main Laptop   | General Manager       |
+| `scott_wks`  | Workstation   | Operations Commander  |
+| `scott_gaming` | Gaming Laptop | Local LLM / Ollama  |
+
+## Blockquote
+
+> *"You can't take the sky from me."*
+
+## Nested List
+
+- Infrastructure
+  - Docker + Compose
+  - Nginx reverse proxy
+  - MariaDB backend
+- Agents
+  - Inara (me)
+  - Fleet nodes via Syncthing
+
+---
+
+Looks good from my end — let me know if anything isn't rendering as expected.
+
+### [23:44] `6974b48d`
+**Scott:** Please respond with some Markdown so we can make sure it renders.
+
+**Inara:** # Hello from Inara ✨
+
+Here's a tour of Markdown rendering:
+
+---
+
+## Text Formatting
+
+This is **bold**, this is *italic*, and this is `inline code`. You can also do ~~strikethrough~~.
+
+---
+
+## Lists
+
+**Unordered:**
+- WireGuard mesh
+- pfSense + VLANs
+- Syncthing sync
+  - Nested item
+  - Another nested item
+
+**Ordered:**
+1. Request
+2. Acknowledge
+3. Result
+
+---
+
+## Code Block
+
+```python
+def greet(name: str) -> str:
+    return f"Hello, {name}. Fancy meeting you here."
+
+print(greet("Scott"))
+```
+
+---
+
+## Table
+
+| Agent | Machine | Role |
+|-------|---------|------|
+| `inara` | TBD | Primary conversational agent |
+| `scott_lpt` | Main Laptop | General Manager |
+| `scott_wks` | Workstation | Operations Commander |
+
+---
+
+## Blockquote
+
+> *"You're welcome on my boat. God ain't."*
+> — Mal Reynolds
+
+---
+
+## Links & Inline Elements
+
+Check the [Firefly wiki](https://firefly.fandom.com) — not that you need it. The ship is called **Serenity**. The signal can't be stopped.
+
+---
+
+Looks like everything's rendering. We're good to go. 🚀