feat: sync with upstream — v1.2.0, in-app updates, Projects, modules

Brings the public tree back in line with the development repo after several
weeks of drift caused by a stale publish include list.

New:
- In-app update path: GET /update/check compares the checkout against
  origin/main and POST /update/apply runs `ncp upgrade` detached (pull,
  rebuild, restart). The sidebar shows the version, checks on click, and
  offers an "update available" pill.
- Projects: a project workspace groups chats and RAG documents, with
  per-project instructions and document retrieval scoped to the active
  project. Replaces the standalone Documents page.
- modules/: auto-discovered feature plugins (mail, network) with their
  frontend counterparts and tests.
- Memory curation runs in-process (synapse/memory/curator.py) on the chat
  model when a conversation goes idle. The separate memory service on :8001
  is gone, along with the launcher lines that started it.

Also: the KDE theme, panel and Promethean terminal assets, the full test
suite, and VERSION 1.2.0.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

synapse/nexus_config.py

@@ -29,12 +29,17 @@ except Exception:
 # Chat: llama3.1:8b - a strong non-reasoning instruct model (~4.9 GB; overflows a
 # 4 GB GPU into CPU/RAM). Chosen over Qwen3 because Qwen3 is a reasoning model:
 # smart only with its slow <think> step, weak without it.
-# Memory: mistral - the curator that extracts facts and titles conversations.
+# Memory: the curator that extracts facts and titles conversations. It is the
+# CHAT model on purpose, not a second one: the chat model is already resident in
+# VRAM and warm, so extraction costs no extra load. A distinct curator (mistral)
+# did not fit alongside it and had to be pinned to CPU (num_gpu=0), which made
+# every extraction a slow prompt-eval on a model too small to follow the
+# curator prompt's negative rules reliably.
 # Embed: nomic-embed-text - powers semantic recall of past conversations
 # (OllamaManager.embed / store.semantic_search_conversations). Without it,
 # recall silently degrades to lexical substring matching.
 DEFAULT_CHAT_MODEL = "llama3.1:8b"
-DEFAULT_MEMORY_MODEL = "mistral:latest"
+DEFAULT_MEMORY_MODEL = DEFAULT_CHAT_MODEL
 DEFAULT_EMBED_MODEL = "nomic-embed-text"
 
 # --- CORE DIRECTORIES ---
@@ -161,7 +166,7 @@ _LOCAL_HOSTS = ["localhost", "127.0.0.1", "[::1]", "::1", "testserver"]
 _LOCAL_ORIGINS = [
     f"http://{h}:{p}"
     for h in ("localhost", "127.0.0.1")
-    for p in (8000, 8001, 5173)
+    for p in (8000, 5173)
 ]
 ALLOWED_HOSTS = _csv_env("NEXUS_ALLOWED_HOSTS", _LOCAL_HOSTS)
 ALLOWED_ORIGINS = _csv_env("NEXUS_ALLOWED_ORIGINS", _LOCAL_ORIGINS)