feat: RSO observation system, child safety, Discord adapter, Telegram watchdog, email attachments

Core agent improvements:
- RSO (Relevance Scoring & Observation) system: interaction_logger, memory_scorer, signal_detector
- Memory access logging (memory_access_log table) for relevance scoring; high-signal turn detection
- Rich conversation storage for notable turns; compact_conversation truncates long user messages
- Task-type classifier (query/action/analysis/creative) for observation tagging
- Nested sub-agent visibility: deep delegations now register against the main agent's manager

Child safety (Gabriel profile):
- child_safety.py: filtering, audit logging, prompt constants for restricted sessions
- .kiro/specs/child-safety-profile: requirements, design, tasks specs
- GABRIEL_BOT_PROPOSAL.md: initial proposal doc
- Reduced context window (10 msgs) and tutor-mode identity for restricted users

Telegram adapter:
- Polling watchdog: auto-restarts updater if polling drops unexpectedly
- get_me() with exponential-backoff retry on NetworkError at startup
- Correct stop() ordering: signal watchdog before cancelling tasks

Email / Gmail:
- send_email: supports file attachments (attachments list param)
- get_email: surfaces attachment metadata in response

Scheduled tasks / weather:
- Remove OpenWeatherMap API calls from morning-weather task; use wttr.in exclusively
- New scheduled tasks and scheduler state persistence

Discord:
- adapters/discord/__init__.py scaffold
- discord-plugin: MCP plugin for Claude Code Discord integration (server.ts, skills, config)

Infrastructure:
- n8n workflow exports (garvis_webhook, content_pipeline variants)
- memory_workspace: context, homelab-repo-updates, weekly observation summaries, error logs
- UCS C240 migration plan doc
- requirements.txt: new deps
- .claude/settings.json, fix_hooks.py: hook/permission tuning

memory_workspace/homelab-repo-updates/INDEX-infrastructure-section.md

@@ -0,0 +1,59 @@
+# INDEX.md — Updated "Your Infrastructure" Section
+# Replace the section starting at "## Your Infrastructure" in INDEX.md with this:
+
+## Your Infrastructure
+
+Based on the export collected 2026-03-31, your environment includes:
+
+### Virtual Machines (QEMU/KVM)
+
+| VM ID | Name | Status | vCPU | RAM | Disk | Purpose |
+|-------|------|--------|------|-----|------|---------|
+| 100 | docker-hub | Running | 4 | 10GB | 100GB | Container registry / Docker hub mirror |
+| 101 | monitoring-docker | Running | 2 | 8GB | 50GB | Monitoring stack (Grafana / Prometheus / PVE Exporter) |
+| 102 | CML | Running | 8 | 32GB | 200GB | Cisco Modeling Labs — network simulation |
+| 104 | ubuntu-dev | Stopped (Template) | 2 | 5GB | 32GB | Ubuntu dev environment template |
+| 105 | pfSense-Firewall | Stopped | 2 | 2GB | 16GB | Firewall lab VM |
+| 106 | Ansible-Control | Stopped | 2 | 4GB | 32GB | IaC / Ansible control node |
+| 107 | ubuntu-docker | Stopped (Template) | 2 | 4GB | 50GB | Ubuntu Docker host template |
+| 114 | haos | Stopped | 2 | 4GB | 50GB | Home Assistant OS |
+
+### Containers (LXC)
+
+| CT ID | Name | Status | vCPU | RAM | IP | Purpose |
+|-------|------|--------|------|-----|----|---------|
+| 109 | caddy | Running | 2 | 2GB | 192.168.2.129 | Reverse proxy + SSL (replaced Nginx Proxy Manager) |
+| 112 | twingate-connector | Running | 1 | 1GB | DHCP | Zero-trust remote access connector |
+| 113 | n8n | Running | 2 | 4GB | 192.168.2.113 | Workflow automation (PostgreSQL 16 + pgvector) |
+| 117 | test-cve-database | Stopped | 4 | 8GB | 192.168.2.117 | CVE database test environment |
+
+### Storage Pools
+
+| Name | Type | Used% | Total | Purpose |
+|------|------|-------|-------|---------|
+| Vault | ZFS Pool | ~2% (110GB) | 4.36TB | Primary VM/CT storage |
+| PBS-Backups | Proxmox Backup Server | ~29.78% | ~1TB | Automated backups |
+| iso-share | NFS | ~1.61% | ~3TB | ISO / installation media |
+| local | Directory | ~22.57% | 45GB | System files, templates |
+| local-lvm | LVM-Thin | ~0.01% | 69GB | Thin-provisioned VM disks |
+
+### Network
+
+| Bridge | IP | Purpose |
+|--------|----|---------|
+| vmbr0 | 192.168.2.100/24 | Primary LAN (eno1) |
+| vmbr1 | 192.168.3.0/24 | Internal/isolated bridge |
+
+**Proxmox host**: serviceslab @ 192.168.2.100, PVE 8.4.0 (kernel 6.8.12-17-pve)
+**Host uptime at last export**: 58 days (since ~2026-02-01)
+
+### What Changed Since Last Documentation (2025-12)
+
+| Change | Detail |
+|--------|--------|
+| Proxmox upgraded | 8.3.3 → 8.4.0 |
+| NPM replaced | Nginx Proxy Manager (CT 102) removed; Caddy (CT 109) now handles reverse proxy/SSL |
+| CML expanded | CML moved to VM 102, now running with 8 vCPU / 32GB RAM / 200GB disk |
+| Removed | CT 103 (netbox), CT 115 (TinyAuth), VM 109/110 (web servers), VM 111 (db-server), VM 120 (OpenClaw) |
+| Added | CT 117 (test-cve-database, stopped) |
+| Now stopped | VM 114 (haos), VM 106 (Ansible-Control) |