v3.14.0

Changed

• ADR-0038 retrieval levers join the default stack. The installer now wires
  OBSIDIAN_MEMORY_PIN_FAILURES=1 and OBSIDIAN_MEMORY_USAGE_BOOST=1 into the
  obsidian-memory-hybrid MCP env by default (all three surfaces: Cursor
  mcp.json, claude mcp add, codex mcp add), same rationale as sqlite-vec:
  ranking-only levers over telemetry that is already collected by default,
  bench-gated in CI. Opt out with --no-pin-failures / --no-usage-boost.
  The cross-encoder reranker stays opt-in (--rerank) — it downloads a model
  on first use and needs the [rerank] extra.

Fixed

• npm license metadata caught up with the license change. The published
  package (@vkmikc/create-obsidian-memory) still declared "license": "MIT"
  and its tarball shipped no license text — npm only auto-includes LICENSE*
  files from the package root, not the repo root. The field now reads
  SEE LICENSE IN LICENSE.md, every packages/* dir mirrors the canonical
  root LICENSE.md (new npm run license:sync + license:sync:check,
  drift-gated in the CI lint job and before npm publish in the release
  workflow), the private packages (obsidian-memory-mcp,
  obsidian-prompt-compiler) declare the same field, and stale "MIT" wording
  in the package README and CONTRIBUTING.md now points at LICENSE.md.
  Verified with npm pack --dry-run that LICENSE.md lands in the tarball.