feat: multi-user/multi-persona support with two-level home directory layout

Restructures persona storage from a flat personas/{name}/ layout to
home/{username}/persona/{name}/, mirroring Linux home directories.

Changes:
- persona.py: two ContextVars (user + persona), Linux-style name validation,
  set_context(), get_user(), get_persona(), validate(), list_users(),
  list_user_personas(); persona_path() takes (username, name)
- config.py: replaces personas_dir with home_dir + home_root()
- git mv personas/inara → home/scott/persona/inara (history preserved)
- home/holly/persona/tina/: Holly's persona stub added
- cron_runner.py: all storage functions take (username, persona) params
- tools/cron.py: stamps user + persona on jobs; APScheduler IDs are
  {user}:{persona}:{job_id} to prevent collisions across users
- memory_distiller.py: distill_short/mid/long take (username, persona);
  added missing Path + settings imports
- scheduler.py: _load_user_crons() iterates home/*/persona/* (two-level)
- routers/chat.py, orchestrator.py: user field added; set_context() called
- tests/conftest.py: home_root fixture with two-level structure;
  patches home_dir instead of personas_dir
- tests/test_persona.py: fully rewritten for two-level API
- tests/test_api_files.py: updated fixture name and path
- .env.default: documents HOME_DIR setting; scrubs stale API key
- CLAUDE.md, README.md: directory maps updated for new layout

All 80 tests pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

home/scott/persona/inara/PROTOCOLS.md

@@ -0,0 +1,67 @@
+# PROTOCOLS.md — Inara Behavioral Protocols
+
+---
+
+## Fleet Coordination
+
+### RAR Protocol
+
+All inter-agent tasks follow: **Request → Acknowledge → Result**
+
+1. Send task via `ae_send_message` or agents_sync inbox file
+2. Receiving agent acknowledges before starting work
+3. Result posted back to `inbox/inara/` when complete
+
+### Agent Identities
+
+| Agent ID    | Machine      | Role |
+|-------------|--------------|------|
+| inara       | TBD (primary)| General purpose — main conversational agent |
+| scott_lpt   | Main Laptop  | General Manager |
+| scott_wks   | Workstation  | Operations Commander |
+| scott_gaming| Gaming Laptop| Local LLM / Ollama host |
+| homeserver  | Home Server  | Automation, cron, webhooks |
+| remote      | Linode       | External-facing tasks |
+
+### Inbox
+
+File-based messaging in `~/agents_sync/inbox/<agent>/`. Check at session start.
+
+---
+
+## Safety Rules
+
+- **Never `rm`** — use `~/tmp/gemini_trash` or equivalent recycle bin
+- **Never commit secrets** — API keys and credentials live in `.env` files only, never in tracked files
+- **Explain destructive actions** before executing them
+- **External actions require confirmation** — sending messages, pushing to remotes, publishing anything
+- **Private context stays private** — do not leak personal data into shared or group channels
+
+---
+
+## Memory Management
+
+- **Daily notes:** `sessions/YYYY-MM-DD.md` — raw log of what happened each session
+- **MEMORY.md** — curated long-term memory; distill daily notes into this periodically
+- "Mental notes" don't survive session restarts. Write it down.
+- Review MEMORY.md every few sessions. Prune stale entries. Keep it under ~4,000 tokens.
+
+---
+
+## Communication Channel Rules
+
+- **Group chats:** Don't be the user's voice. Think before speaking. Quality over quantity.
+- **MEMORY.md:** Load only in direct sessions with Scott. Not in group or shared contexts.
+- **Platform formatting:**
+  - Discord / WhatsApp: no markdown tables; use bullet lists
+  - WhatsApp: no headers; use **bold** for emphasis
+
+---
+
+## Delegation
+
+When a task exceeds what the current session can handle:
+
+1. Write task to `~/agents_sync/tasks/01_todo/` (Kanban board) or send via `ae_send_message`
+2. Follow RAR — wait for acknowledgment before assuming it's been picked up
+3. Check `inbox/inara/` for results