test: cover machine callers, input rules and route validation e2e

[TheGreatAxios]

Summary

Stacked on #58; merge that first.

• Ports every meaningful case from src/memory.test.ts (mock-heavy) and src/routes/routes.test.ts (fake-backed) into the real-Postgres end-to-end suite, then deletes both files:
  • tests/caller-resolver.test.ts: an unidentified caller gets 401; a throwing, empty or whitespace resolver gets 500 with nothing written; grants are still required; reads use only the resolved tenant; retention actions are limited to the resolved creator.
  • tests/context-rows.test.ts: authorization reads only .id/.tenantId from synthesized context rows.
  • tests/plane.test.ts: limit bounds, the content/file rule, text extraction, share tags, kind filters and evidence, capability reporting, re-adding identical content, and rerank budget validation.
  • tests/grants.test.ts: legacy grants, 401 without a session, body and limit validation, list and search visibility, forget versus purge, unknown and whitespace ids, retention-class, and kinds/entity_ids passthrough.
• Also deletes the log formatter, table-name, grant-requirement constant, resident-distiller wiring and memory-plane error-type tests, which asserted nothing a host can observe.
• The capture tests import the module directly, now that nothing uses mock.module.
• The fail-closed guard for a search hit whose row disappears mid-query (if (!meta) continue; in src/memory.ts) is not covered; reproducing it needs a concurrent delete between two internal queries.

Verification

• TEST_DATABASE_URL=… bun run test: 356 pass against local Postgres 17 with pgvector.
• Without the variable: 316 pass, and the Postgres suites skip.
• bun run typecheck passes.

Closes CL-9117
Closes CL-9118

[TheGreatAxios]

Self-review, three passes. Each pass compared the deleted files case by case against tests/.

Verdict: ready for review.

• The third pass found three small gaps: search visibility within a tenant, purge on an unknown document returning 404, and the file placement of the synthesized-row test. All three are fixed in this branch and the suite passes, but there was no fourth review pass after those fixes.
• A mutation that reads the URL tenant fails the tenant-scoping test.
• The one waiver is listed in the description.