Release v0.9.5: Memory Promotion Safety and Poetry Packaging

[wxai-space]

Summary

• add MemoryCandidate as a non-injectable representation for reflection, delegation, shared, and other internal memory evidence
• add MemoryPromotionDecision with approve, reject, rewrite, and keep outcomes
• add memory_promotion_admission plus before_memory_promote and after_memory_promote lifecycle hooks
• keep internal candidates non-injectable by default and expose explicit post-run promotion through promote_memory_candidate(...)
• record promotion-required, approved, rejected, rewritten, blocked, and persisted outcomes in trace events
• preserve the existing memory-write lifecycle by firing after_memory_write after successful promotion persistence
• filter unpromoted, rejected, blocked, or explicitly non-injectable memory before prompt injection
• make the OSS/NOS boto3 dependency optional and add oss / nos extras
• migrate package builds to poetry-core and add a reproducible Poetry build workflow from fix for broken build pipeline #81
• preserve the complete fix for broken build pipeline #81 commit history and contributor attribution
• pin GitHub Actions to reviewed commit SHAs and pin Poetry to 2.4.1
• regenerate poetry.lock for v0.9.5 and the optional OSS/NOS dependency markers
• update memory security, admission, trace/swarm boundary, hooks, shared-memory, README, and roadmap documentation
• bump the package version to 0.9.5 without adding a README News entry

Security and compatibility

• normal user-memory writes remain compatible
• internal reflection/delegation memory now fails closed as a candidate unless explicitly promoted
• applications that intentionally rely on legacy internal-memory behavior can set MemoryPolicy(require_promotion_for_internal_memory=False)
• importing LightAgent no longer requires boto3; object-storage users can install LightAgent[oss], LightAgent[nos], or boto3 directly
• requirements.txt remains available for the existing pip-based installation path
• CI no longer executes mutable GitHub Actions main branches or an unpinned Poetry release

Testing

• full tracked suite after integration: 112 passed
• poetry check --lock passed with Poetry 2.4.1
• Poetry built lightagent-0.9.5-py3-none-any.whl successfully
• python -m compileall -q LightAgent passed
• git diff --check passed

Issues and attribution

Closes #82.
Addresses the v0.9.5 mitigation boundary for #39; keep #39 open until the shared Graph Memory integration acceptance criteria are reviewed after merge and CI.

Incorporates #81 and preserves the commits authored by @CINJ. The unsafe intermediate CI configuration from that PR is corrected in this branch before any change reaches main.