feat(memos-local-plugin): repair hub team sharing (#1754)

## Summary
- Rework MemOS Local team Hub runtime with server/client auth, approval
state, soft-delete sharing, and Hub memory search.
- Update Hub sharing UI so Hub hosts and clients see role-specific
controls, nickname/team-token flow, member removal, and refreshed
status.
- Merge Hub retrieval as one retrieval route, dedupe local/Hub hits, run
a single local LLM filter, and cap OpenClaw injected memory context.
- Persist Hub sharing metadata and add Hub runtime/storage tests.

## Verification
- PASS: `git diff --check -- apps/memos-local-plugin`
- PASS: `bash -n install.sh`
- PASS: `npm run lint`
- PASS: `npx vitest run tests/unit/hub/runtime.test.ts
tests/unit/retrieval/integration.test.ts tests/unit/viewer/share.test.ts
tests/unit/server/http.test.ts`
- KNOWN FAIL: `npx vitest run tests/unit/pipeline/memory-core.test.ts`
currently has 8 failing legacy behavior assertions around subagent
timeline visibility, feedback priority, and restart/rescore
expectations.

## Scope
Only files under `apps/memos-local-plugin` are included, per
`AGENTS_jiang.md`.