fix: resolve all 75 mem-cli compilation errors across 25 files

- embed_text -> embed_one + Vector to Vec<f32> conversion (semantic.rs, unified_query.rs)
- DefaultAgent: remove shadowing type alias, re-export concrete struct
- Position: add Default derive for unwrap_or_default()
- streaming_body -> streaming + yield Result<Bytes> for SSE
- borrow-after-move: compute len before move in 6 places
- add missing imports: sqlx::Row, chrono::Timelike, std::pin::Pin
- add missing derives: Serialize on CompactionStats, FacetFilters
- extract_token: extract Authorization header from HttpRequest first
- AuthError variants: match actual enum (TokenExpired, not ExpiredToken)
- validate_bearer_token -> extract_bearer_token (sync check)
- check_limit -> check with correct args
- link_entities -> link_mentions (async, correct signature)
- InferenceEngine::new + infer_facts: match actual 2-arg/3-arg API
- RoutedResult: add missing confidence_score + is_valid fields
- client_sdk: fix ownership (remove borrow, save status before .text())
- index_chunk -> index_document (match OpenSearchClient API)
- recursive async dfs_paths: Box::pin for infinite future size
- log -> tracing crate in authentik_service_account
- CI: add SQLX_OFFLINE=true env var for offline builds

crates/mem-cli/src/query_router.rs

@@ -245,6 +245,8 @@ impl QueryRouter {
             prefilter_size,
             metrics,
             latency_ms,
+            confidence_score: 1.0,
+            is_valid: true,
         })
     }