feat: OpenClaw bidirectional memory sync + conflict visibility

[krusty-agent]

Summary

Completes remaining Mission Control launch-gate primitives for:

1. zero-downtime API key rotation, and
2. artifact retention with auditable deletion logs (default 30d).

What changed

• Schema additions
  • Extended apiKeys with rotation metadata (rotatedFromKeyId, rotatedToKeyId, rotationGraceEndsAt).
  • Added apiKeyRotationEvents table for audit trail of rotations/finalization.
  • Added missionControlSettings table (owner-scoped retention config).
  • Added missionArtifactDeletionLogs table for auditable retention execution logs.
• Core Mission Control logic (convex/missionControlCore.ts)
  • Added createRotatedApiKey (creates successor key + overlap metadata + rotation event).
  • Added finalizeApiKeyRotation (revokes old key + marks rotation event finalized).
  • Added listApiKeyRotationEvents.
  • Added retention config query/mutation (getMissionControlSettings, upsertMissionControlSettings).
  • Added applyArtifactRetention (default 30d fallback, dry-run support, per-run log entries).
  • Added listArtifactDeletionLogs.

Validation

Executed locally:

• git fetch origin && git rebase origin/main ✅ (up to date; no conflicts)
• npm run lint ⚠️ fails in repository baseline with many pre-existing lint violations outside this change set.
• npm run build ⚠️ fails in repository baseline due existing TypeScript issues in DID modules unrelated to these changes.

Notes

• Branch already contains REST endpoint/docs/UI-hook plumbing for rotation/retention from prior Mission Control work; this update supplies the missing persistence + core execution/audit primitives those routes depend on.

Agent next-launch-gates: completed | Added rotation state/audit + retention settings/job + deletion audit log core/schema primitives | Next: merge PR and run Convex deploy/codegen in environment with CONVEX_DEPLOYMENT configured.