Post-0.1.35 cleanup and a /init-workspace-aligned MCP installer:

- Settings → MCP "Install snippet" gains an explicit User/Project
  scope toggle. Project mode picks from the reachable project list
  and writes <project>/.claude/claudepot-mcp-instructions.md plus a
  relative `@.claude/...` include line for the project's AGENTS.md
  (the canonical source-of-truth per /init-workspace). User mode
  retains ~/.claude/ and names the three home-scope agent configs.
- Shared Memory section's "database is locked" surfaced via the
  Tauri MCP bridge — every shared_memory_* command was opening its
  own SessionIndex per call. Now one Arc<SessionIndex> at startup,
  managed via Tauri state.
- MCP health probe was spawning the GUI binary (no `mcp` subcommand)
  and its 8s deadline was a no-op against blocking read_line.
  Resolved with build-aware CLI resolution + tokio::time::timeout.
- exchanges.id namespaced by source_kind (SCHEMA_VERSION 4→5); the
  agent-instruction snippet body consolidated into
  claudepot_core::mcp_snippet; CSS token-literal artifacts from the
  ui-tokenize hook rewritten to real var(--*) custom properties.
- MCP list_memories / list_decisions now reject invalid scope / kind
  / status values instead of silently coercing to "no filter".

Codex /audit-fix round closed 12 findings; all gates green
(cargo test --workspace 2284+, clippy --workspace --all-targets,
pnpm test 594/594).