feat: audit log, usage tracking UI, OpenAI orchestrator compaction, onboarding + docs

Tool audit log:
- Every orchestrator tool call logged to home/{user}/tool_audit/YYYY-MM-DD.jsonl
- Files panel sidebar: audit log group (collapsed), date-linked read-only table
- Admin endpoints: /api/audit/files, /api/audit/day, /api/audit/recent, /api/audit/stats
- Engine and model name recorded per entry

OpenAI orchestrator improvements:
- Context budget enforcement: 75% of model context_k (min 16k)
- Message compaction: truncates old tool results when approaching budget
- max_rounds respected per model config (intersected with server cap)

OpenRouter onboarding (setup.html, onboarding.py, app.js, settings.html):
- Step 3 of 3: /setup/model with curated model picker
- Chat banner for users on server-default model (informational, not alarmist)
- Settings quick-link card; /setup/model works standalone for existing users

Model registry + session store:
- set_role_config / get_role_config for per-role tool lists and system_append
- session_store: session rename, session name backfill endpoint

UI updates (app.js, index.html, style.css, local_llm.html):
- Role toggle in context panel
- Off-the-record mode
- Agent notes read-only viewer
- OPERATIONS.md loaded at T2+ in context

Documentation:
- HELP.md: full tool table, per-role tool sets, Agent Notes, usage tracking
- TOOLS.md: Agent Notes section, count corrected to 44
- ARCH__SYSTEM.md, ARCH__BACKENDS.md, MASTER.md updated to match reality
- CLAUDE.md: onboarding flow, documentation philosophy sections
- README.md: stack in practice, DeepSeek TUI mention, architecture diagram updated
- TODO__Agents.md: onboarding task completed with deviation notes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

cortex/tools/__init__.py

@@ -64,6 +64,12 @@ from tools.scratch import (
     scratch_clear  as _scratch_clear,
 )
 from tools.notify import nc_talk_send as _nc_talk_send, email_send as _email_send, web_push as _web_push
+from tools.agent_notes import (
+    agent_notes_read   as _agent_notes_read,
+    agent_notes_write  as _agent_notes_write,
+    agent_notes_append as _agent_notes_append,
+    agent_notes_clear  as _agent_notes_clear,
+)
 
 # ── Declaration imports ───────────────────────────────────────────────────────
 
@@ -77,6 +83,7 @@ import tools.cron         as _mod_cron
 import tools.reminders    as _mod_reminders
 import tools.scratch      as _mod_scratch
 import tools.notify       as _mod_notify
+import tools.agent_notes  as _mod_agent_notes
 
 # ── Tool categories — used by the Model Registry UI for grouped checkboxes ───
 
@@ -98,6 +105,7 @@ TOOL_CATEGORIES: dict[str, list[str]] = {
         "ae_journal_entry_prepend",
     ],
     "Aether Tasks":     ["ae_task_list"],
+    "Agent Notes":      ["agent_notes_read", "agent_notes_write", "agent_notes_append", "agent_notes_clear"],
 }
 
 # ── Callable registry ─────────────────────────────────────────────────────────
@@ -143,6 +151,10 @@ _CALLABLES: dict[str, callable] = {
     "email_send":                _email_send,
     "nc_talk_send":              _nc_talk_send,
     "web_push":                  _web_push,
+    "agent_notes_read":          _agent_notes_read,
+    "agent_notes_write":         _agent_notes_write,
+    "agent_notes_append":        _agent_notes_append,
+    "agent_notes_clear":         _agent_notes_clear,
 }
 
 # ── Role-based access control ─────────────────────────────────────────────────
@@ -194,6 +206,7 @@ _ALL_DECLARATIONS: list[types.FunctionDeclaration] = (
     + _mod_notify.DECLARATIONS
     + _mod_ae_knowledge.DECLARATIONS
     + _mod_ae_tasks.DECLARATIONS
+    + _mod_agent_notes.DECLARATIONS
 )
 
 # Full Gemini Tool object (all tools — use get_tools_for_role() in production)