feat: isolate MemOS memory by agent namespace

[hijzy]

Summary

• Add namespace ownership fields for Hermes profiles and OpenClaw agents across MemOS memory rows.
• Thread runtime namespace context through Hermes/OpenClaw adapters, retrieval, tools, and viewer APIs.
• Enforce private-vs-shared visibility while preserving local/public/hub sharing flows.

Test plan

• npm run lint
• npx vitest run tests/unit/pipeline/memory-core.test.ts tests/unit/storage/migrator.test.ts tests/unit/bridge/methods.test.ts tests/unit/adapters/hermes-protocol.test.ts tests/unit/adapters/openclaw-bridge.test.ts tests/unit/adapters/hermes-persistence.test.ts
• /Users/jiang/MyProject/MemOS-jiang/.venv/bin/ruff check apps/memos-local-plugin/adapters/hermes/memos_provider
• /Users/jiang/MyProject/MemOS-jiang/.venv/bin/ruff format --check apps/memos-local-plugin/adapters/hermes/memos_provider

Note: full npm run test:unit still has unrelated existing failures in reward.integration, reward.subscriber, and memory/l3/cluster.