fix(hooks): preserve Cursor workspace context

[hopeatina]

Scope

• resolve Cursor hook cwd from workspace_roots / CURSOR_PROJECT_DIR instead of the installed plugin directory
• use the same resolved workspace for Work Graph records and Wizard session-summary bridging
• add regression coverage for plugin-cwd and multi-root fallbacks
• prepare patch release 0.1.7

Evidence

• Reproduced with Cursor Agent 2026.08.11: production session row persisted but its explicit work_context was absent because the hook recorded the installed plugin directory as cwd.
• npm run check (manifest verification + 23/23 hook tests)
• git diff --check

Rollout

• merge after CI passes
• tag v0.1.7, verify npm publication, reinstall locally
• rerun a real Cursor Agent session and verify production work_context.intent.summary plus exact source client

Risk

Low. The adapter still allowlists the same privacy-safe fields; it now sources cwd from Cursor's documented workspace metadata.