Warm minions

Our subagents start with a fenced copy of the memory

Main session gingugu: full access spawns Subagent inherited gingugu stripped by disallowedTools brain server reads everything, writes only "minions" starts with memories picked for the task it was given SubagentStart hook task-ranked memories memories.db fenced ✗ Bash / Read on the file blocked by a PreToolUse fence
Live check this week: ✓ warm-up injected ✓ 17 memory tools ✓ search works ✗ write to project: refused ✓ write to scratch