Security and maintenance release. Replaces the archived fastembed package with the maintained @mastra/fastembed fork, removing the 12 node-tar Dependabot alerts while preserving local BGE-small-zh-v1.5 semantic recall. Full migration, semantic recall, automatic capture, scope, conflict, expiry, secure-delete, export, restart, and MCP tests pass. Three upstream onnxruntime-node/adm-zip alerts remain accepted by project decision.