feat(storage): vectordb persistence + FTS5 opt-in + 24h search clamp … #104

Job	Run time
jscpd (duplication < 3% on touched code)	14s
Semgrep (SAST)	22s
Trivy (filesystem + container scan)	13s
SBOM (SPDX + CycloneDX)	20s
Gitleaks (secret scan)	10s
OSV-Scanner (SCA)	5s
	1m 24s

Provide feedback