feat: Adopt parallel branch's test suites and MCP ergonomics

Integrates the valuable work from the parallel rollback on origin/main:
the executable MCP user-flow test suite, in-process MCP tests, CI
workflow, and parity/testing docs — adapted to this implementation.

MCP ergonomics (from the remote branch's parity work):
- Accept docs-prefixed tool names (mcp_tinybrain-mcp-server_<tool>)
- Notifications identified by method prefix, not missing id; explicit
  "id": null still receives a response
- tags/categories accepted as JSON arrays or JSON array strings
- create_relationship accepts source_entry_id/target_entry_id (docs
  names) alongside source_memory_id/target_memory_id
- create_context_snapshot accepts context_data as object or string
- update_task_progress accepts task_id (docs) or session_id+task_name
- reverse_engineering and malware_analysis session task types
- mcp.Server.HandleRequest exported for in-process testing

Fixes found by the adopted tests:
- BatchUpdateMemoryEntries deadlocked: it queried via the pool (sized
  to one connection) while its own transaction held that connection;
  updated entries are now fetched after commit
- FTS5 multi-word queries were phrase matches that returned nothing
  for natural queries; terms are now individually quoted and OR-ed

go build/vet and the full test suite pass, including the executable
MCP user-flow test that drives the built binary end-to-end.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: rainmana

.github/workflows/ci.yml

@@ -0,0 +1,56 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Go tests (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+          - ubuntu-latest
+          - windows-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v6
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+          cache: true
+
+      - name: Download modules
+        run: go mod download
+
+      - name: Run full test suite
+        run: go test -v ./...
+
+      - name: Run executable MCP user-flow tests
+        run: go test -v ./cmd/server -run TestMCPExecutableAuthorizedAssessmentFlow -count=1
+
+      - name: Run vet
+        run: go vet ./...
+
+      - name: Build server (Windows)
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          New-Item -ItemType Directory -Force -Path bin | Out-Null
+          go build -o bin/tinybrain.exe ./cmd/server
+
+      - name: Build server (Unix)
+        if: runner.os != 'Windows'
+        run: |
+          mkdir -p bin
+          go build -o bin/tinybrain ./cmd/server