Magnemo 0.6.7 — the polish

• magnemo review says HELD and TAINTED. A note Sentinel is holding is labelled before its text, the text of a
  flagged note is shown quoted, and there is no [p] for it: "held by Sentinel — magnemo clear <id> first". The
  terminal now matches what magnemo yes already did in 0.6.6.
• A yes or a no from review is on the record like every other: the ledger line carries ran_by and a reason.
• A note Sentinel caught earns its author no trust. A secret or an instruction-shaped line that you read, cleared
  and kept becomes canon; the trust.event success a promotion gives its author is not written for it.
• The ALERT is scored when it is staged and is read first. No more "unscored — run: cli rescore"; Sentinel's
  notices lead the review queue. The inbox door's and the chest's notices are scored too. It says "an MCP stage".
• README: for a desktop-only Mac, where the app keeps its own claude.

Also in this release: 0.6.6 — the polish

• No traceback reaches a person. magnemo stage with a store the partition does not have answers in one line naming
  the partition's stores (and checks before anything is written, Sentinel's notice included); an unknown partition names
  the vault's partitions; a missing --file says so. An id no note matches is one line on show, yes, no, clear,
  promote, reject and flag. magnemo review without a terminal says "review needs a terminal; use magnemo yes <id> / magnemo no <id>" and lists what waits by short id. Anything else that fails prints magnemo: <one line>;
  MAGNEMO_DEBUG=1 shows the trace.
• The short id works everywhere. The eight characters stage prints (magnemo yes 17f26148) are now taken by
  show, clear and cleartaint as well as yes and no, for staged and canonical notes; two matches are listed.
• yes waits for clear. magnemo yes <id>, magnemo promote and review's [p] refuse a tainted or held note in
  a sentence — "TAINTED — read it, then clear it: magnemo clear --reason …" — until a keyholder has cleared it.
  yes --all skips them and counts them. A Sentinel ALERT is a notice, not a memory, and carries no taint of its own:
  yes --all and a bare yes skip it and count it; you keep one by naming it (magnemo yes <id>) or drop it
  (magnemo no <id> --reason …). A kept alert is served and wakes in the boot pack; the pack says how many notes
  Sentinel is holding.
• magnemo stage --help shows one real example, with a partition, a store and a source, and says what a new vault's
  stores are.