feat: bind Cursor context to native sessions

[hopeatina]

Scope

• hydrate the canonical v1 context pack at Cursor sessionStart
• bind Wizard activation v2 to resolved cwd plus native Cursor session id
• inject bounded first-turn additional context and keep runtime state private
• clear exact-session authority on failures and sessionEnd
• default prompt capture to metadata-only unless explicitly enabled

Verification

• npm run check (54 tests: 53 passed, 1 opt-in integration skipped)
• opt-in real Wizard v2 adapter integration passed against the Wizard build
• npm run pack passed

Release dependency

Installed-client parity requires the matching Wizard v2 release. The globally installed Wizard was 0.1.69 during verification.