ContextForge 0.1.4

• Added candidate-id review workflows: promoteMemoryCandidate --candidateId
  marks candidates as promoted with review metadata, and rejectMemoryCandidate
  marks reviewed candidates as rejected without creating durable memory.
• Exposed candidate rejection through the CLI, remote API, and MCP
  reject_memory_candidate tool.
• Added v2 memory-candidate review fields for type, confidence, stability,
  sensitivity, recommendation, and source event ids.
• Added lightweight candidate promotion warnings for duplicate keys, duplicate
  content, risky recommendation/sensitivity signals, and low confidence or
  stability. Callers must pass allowWarnings to promote through warnings.
• Added candidate review state guards so already promoted or rejected candidates
  cannot be changed again unless callers pass allowStatusOverride.
• Made memory-candidate index backfill run once per database instead of on every
  store open.
• Exposed maxEvents and maxChars on MCP session_status and
  distill_checkpoint, matching the CLI/core bounded-window controls.
• Preserved remote error names and warning details across the remote client
  boundary.
• Extracted shared ingest registry, routing, dedupe, discovery, and watch helpers
  for Codex and Claude Code adapters.
• Made ingest watch sleeps interruptible so SIGINT/SIGTERM can stop long-running
  watchers without waiting for the full interval.